Medium
CVE-2024-24930
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-0596
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()
High
CVE-2024-1317
RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection
Medium
CVE-2024-24929
WP Contact Form <= 1.6 - Cross-Site Request Forgery via wpcf_adminpage
Medium
CVE-2024-0658
Insert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-24933
Honeypot for WP Comment <= 2.2.3 - Reflected Cross-Site Scripting via page
Medium
CVE-2024-0595
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()
Medium
CVE-2024-24931
Before After Image Slider WP <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2024-0594
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-24927
Brooklyn <= 4.9.9.2 - Reflected Cross-Site Scripting
High
CVE-2024-24926
Brooklyn <= 4.9.9.2 - PHP Object Injection
Medium
CVE-2024-24928
Content Cards <= 0.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-1340
Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization
Medium
CVE-2024-24935
Basic Log Viewer <= 1.0.4 - Cross-Site Request Forgery via wpst_lw_viewer
Medium
CVE-2024-1318
RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication
Medium
CVE-2024-24932
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost
Medium
CVE-2024-25092
NextMove Lite <= 2.17.0 - Missing Authorization to Authenticated(Subscriber+) Plugin Activation
Low
CVE-2023-42282
NPM IP package incorrectly identifies some private IP addresses as public
High
ghsa-8v28-3g86-chj5
PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
ghsa-259p-rvjx-ffwg
Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
CVE-2024-24810
WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
CVE-2024-24113
XXL-JOB vulnerable to Server-Side Request Forgery
High
CVE-2024-24821
Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php
Medium
CVE-2024-25144
Liferay Portal denial-of-service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.