Critical
CVE-2024-25845
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2024-27915
Sulu grants access to pages regardless of role permissions
Critical
CVE-2024-27307
JSONata expression can pollute the "Object" prototype
High
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
Low
CVE-2024-28088
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading con
Medium
CVE-2024-1093
Change Memory Limit <= 1.0 - Missing Authorization via admin_logic()
Medium
CVE-2024-1723
SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1564
Schema Pro <= 2.7.15 - Authenticated (Contributor+) Custom Field Access
Medium
CVE-2024-1769
JM Twitter Cards <= 14 - Information Exposure via Meta Description
Critical
CVE-2023-6825
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Medium
CVE-2024-1381
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
High
CVE-2024-0825
Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-1088
Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API
Medium
CVE-2024-1285
Page Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing
High
CVE-2024-1731
Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-0698
Easy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1095
Build & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization
Medium
CVE-2024-1478
Maintenance Mode <= 3.0.1 - Information Exposure
Medium
CVE-2024-0839
FeedWordPress <= 2022.0222 - Insecure Direct Object Referece
Medium
CVE-2024-1782
Blue Triad EZAnalytics <= 1.0 - Reflected Cross-Site Scripting via 'bt_webid'
Medium
CVE-2024-1178
SportsPress – Sports Club & League Manager <= 2.7.17 - Missing Authorization to Unauthenticated Event Permalink Update
Medium
CVE-2024-25865
hexo-theme-anzhiyu Cross-site Scripting vulnerability
Medium
CVE-2024-27296
Directus version number disclosure
Critical
ghsa-4g2x-vq5p-5vj6
Budibase affected by VM2 Constructor Escape Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.