Medium
CVE-2024-2110
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-0868
coreActivity <= 2.0.1 - IP Spoofing
High
CVE-2024-1770
Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2024-2101
Salon booking system <= 9.6.2 - Authenticated (Customer+) Stored Cross-Site Scripting
Medium
CVE-2024-2111
Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2783
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-2309
WP Staging (Free <= 3.3.3, Pro <= 5.3.3) - Authenticated (Administrator+) Stored Cross-Site-Scripting
Medium
CVE-2024-1219
Easy Social Feed <= 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2102
Salon booking system <= 9.6.2 - Unauthenticated Stored Cross-Site Scripting via 'sms_prefix'
Medium
CVE-2024-2091
Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50374
CMP – Coming Soon & Maintenance <= 4.1.10 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2024-25420
Ignite Realtime Openfire privilege escalation vulnerability
High
CVE-2024-25421
Ignite Realtime Openfire privilege escalation vulnerability
Medium
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Medium
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Medium
CVE-2024-29735
Apache Airflow Improper Preservation of Permissions vulnerability
Medium
CVE-2024-29644
dcat-admin Cross Site Scripting vulnerability
High
CVE-2024-30230
PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2024-2954
WordPress Action Network 1.4.3 -Authentcated (Admin+) SQL Injection
Medium
CVE-2024-30235
Multiple Page Generator Plugin – MPG <= 3.4.0 - Missing Authorization via mpg_get_log_by_project_id
High
CVE-2024-1983
Simple Ajax Chat <= 20240216 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-23500
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.19 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-1521
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload
Medium
CVE-2024-25599
Seriously Simple Podcasting <= 3.0.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.