Medium
CVE-2024-1282
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-0438
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1390
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page
Medium
CVE-2024-25112
Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder
Medium
CVE-2024-24826
Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder
Medium
ghsa-6ccv-8fgf-cjpw
Drupal core Denial of Service vulnerability
Medium
CVE-2024-1459
Undertow Path Traversal vulnerability
Low
CVE-2021-4437
lambda-middleware Inefficient Regular Expression Complexity vulnerability
Critical
CVE-2024-25108
Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions
High
CVE-2024-23833
OpenRefine JDBC Attack Vulnerability
Medium
CVE-2024-1439
Moodle Improper Access Control vulnerability
Medium
CVE-2024-1058
SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1171
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Medium
CVE-2024-1172
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion
Critical
CVE-2024-25911
MoveTo <= 6.2 - Unauthenticated Directory Traversal to Arbitrary File Deletion
Medium
CVE-2024-25099
Paytium: Mollie payment forms & donations <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-1159
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
Medium
CVE-2024-1157
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Medium
CVE-2024-25595
Defender Security <= 4.4.1 - IP Address Spoofing
High
CVE-2024-25095
Easy Forms for Mailchimp <= 6.8.10 - Sensitive Information Exposure via logfile
Medium
CVE-2024-1294
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Medium
CVE-2024-25907
WP Media folder <= 5.7.2 - Missing Authorization to Authenticated(Subscriber+) Plugin settings change
Medium
CVE-2024-25593
NEX-Forms – Ultimate Form Builder <= 8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2024-25910
MoveTo <= 6.2 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.