High
CVE-2024-3211
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-3478
Herd Effects – fake notifications and social proof plugin <= 5.2.6 - Cross-Site Request Forgery
Critical
CVE-2024-32098
Advanced Page Visit Counter <= 8.0.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-2867
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-32087
Product Feed on WooCommerce for Google <= 3.5.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-3476
Side Menu Lite – add sticky fixed buttons <= 4.2 - Cross-Site Request Forgery
Medium
CVE-2024-32110
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
Medium
CVE-2024-32078
FV Flowplayer Video Player <= 7.5.44.7212 - Authenticated (Contributor+) Arbitrary Redirect
Medium
CVE-2024-1841
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
Medium
CVE-2024-32102
Crony Cronjob Manager <= 0.5.0 - Cross-Site Request Forgery
Medium
CVE-2024-2405
Float menu – awesome floating side menu <= 6.0 - Cross-Site Request Forgery to Menu Deletion
Medium
CVE-2024-2137
All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets
Medium
CVE-2024-32105
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-32083
Easy Logo <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-32109
WP Matterport Shortcode <= 2.1.9 - Cross-Site Request Forgery
Medium
CVE-2024-32095
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery
Medium
CVE-2024-32108
Convert Post Types <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2024-32093
Novelist <= 1.2.2 - Cross-Site Request Forgery
Critical
CVE-2024-31819
WWBN AVideo Remote Code Execution
Critical
CVE-2024-3098
llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution
Critical
CVE-2024-31997
XWiki Platform remote code execution from account through UIExtension parameters
Critical
CVE-2024-31996
XWiki Commons missing escaping of `{` in Velocity escapetool allows remote code execution
Medium
CVE-2024-31995
zcap has incomplete expiration checks in capability chains.
High
CVE-2024-2217
gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated ver
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.