Medium
CVE-2024-30459
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-30480
CGC Maintenance Mode <= 1.2 - IP Spoofing
High
CVE-2023-6967
Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-30426
Hash Elements <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30441
Post Grid <= 2.2.74 - Reflected Cross-Site Scripting
Critical
CVE-2024-30486
Media Library Folders <= 8.1.7 - Authenticated (Author+) SQL Injection
Medium
CVE-2024-30520
Carousel Anything For WPBakery Page Builder <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30522
Newsletter <= 8.2.0 - IP Spoofing
Medium
CVE-2024-30450
OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-30438
Print Page block <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2936
Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
Critical
CVE-2024-30496
Element Pack Elementor Addons <= 5.5.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2250
130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-30495
Falang multilanguage <= 1.3.47 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-21505
web3-utils Prototype Pollution vulnerability
Medium
CVE-2024-23451
Elasticsearch Incorrect Authorization vulnerability
Medium
CVE-2024-23450
Elasticsearch Uncontrolled Resource Consumption vulnerability
Unrated
CVE-2024-13252
drupal/tacjs - SA-CONTRIB-2024-016
Medium
CVE-2024-27091
GeoNode: Stored XSS to full account takeover
Medium
CVE-2024-1023
Eclipse Vert.x memory leak
Critical
CVE-2024-28335
Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted
Medium
CVE-2024-2118
Social Media Share Buttons <= 2.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2792
Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget
High
CVE-2024-2501
Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.