High
CVE-2023-45860
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
High
ghsa-w4hv-vmv9-hgcr
GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
Low
CVE-2024-24758
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
Medium
CVE-2024-24750
fetch(url) leads to a memory leak in undici
High
CVE-2024-25466
React Native Document Picker Directory Traversal vulnerability
Medium
CVE-2023-49508
YetiForceCRM Directory Traversal vulnerability
Critical
CVE-2024-0610
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection
Critical
CVE-2024-1512
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
Medium
CVE-2024-0590
Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-1445
Page scroll to id <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1279
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) Information Disclosure via Shortcode
Medium
CVE-2024-0978
My Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-1472
WP Maintenance <= 6.1.6 - Information Exposure
Medium
CVE-2024-1277
Ocean Extra <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-20720
Magento Open Source allows OS Command Injection
High
CVE-2024-20719
Magento Open Source allows Cross-Site Scripting (XSS)
Medium
CVE-2024-20718
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Medium
CVE-2024-20716
Magento Open Source allows Uncontrolled Resource Consumption
Medium
CVE-2024-1892
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML conte
High
CVE-2024-25909
WP Media folder <= 5.7.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-1411
PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget
Medium
CVE-2024-25926
Widgets Controller <= 1.1 - Unauthenticated Cross-Site Scripting
Critical
CVE-2024-25928
Sitepact's Contact Form 7 Extension For Klaviyo <= 1.0.5 - Unauthenticated SQL Injection
Critical
CVE-2024-25927
postMash – custom post order <= 1.2.0 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.