High
CVE-2021-22573
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-31862
Apache Zeppelin: Denial of service with invalid notebook name
Medium
CVE-2024-31863
Apache Zeppelin: Replacing other users notebook, bypassing any permissions
Medium
CVE-2022-47894
Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE
High
CVE-2024-3046
Eclipse Kura LogServlet vulnerability
Medium
CVE-2021-28656
Apache Zeppelin CSRF vulnerability in the Credentials page
Medium
CVE-2024-31860
Apache Zeppelin Path Traversal vulnerability
High
CVE-2024-1233
WildFly Elytron: SSRF security issue
Medium
CVE-2024-31369
Soledad <= 8.4.5 - Cross-Site Request Forgery
Medium
CVE-2024-3210
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-single-checkbox'
Medium
CVE-2024-31365
Post Type Builder <= 2.1.0 - Reflected Cross-Site Scripting
High
CVE-2024-4439
WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
High
CVE-2024-3020
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
Critical
CVE-2024-31370
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-31372
No-Bot Registration <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2024-2664
Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2665
Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-32590
Kattene <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1780
BizCalendar Web <= 1.1.0.25 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2024-1042
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions
High
CVE-2023-6964
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)
Medium
CVE-2024-3235
Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure
Medium
CVE-2024-2736
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Medium
CVE-2024-31371
WP Event Aggregator <= 1.7.6 - Cross-Site Request Forgery via wpea_deauthorize_user()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.