Medium
CVE-2024-24816
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-24815
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
Critical
CVE-2024-24563
Vyper negative array index bounds checks
High
CVE-2024-25143
Liferay Portal denial of service (memory consumption)
Critical
CVE-2024-25145
Liferay Portal stored cross-site scripting (XSS) vulnerability
Medium
CVE-2023-39196
Apache Ozone Improper Authentication vulnerability
High
CVE-2023-51437
Apache Pulsar SASL Authentication Provider observable timing discrepancy vulnerability
Medium
CVE-2024-1090
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll
Medium
CVE-2024-0511
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta
Medium
CVE-2024-0965
Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-0516
Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
Medium
CVE-2024-0984
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in disableOptimization
Medium
CVE-2024-1336
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in optimizeAllOn
Medium
CVE-2024-1335
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in disableOptimization
Medium
CVE-2024-0512
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist
High
CVE-2024-1206
WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Medium
CVE-2024-0514
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare
Medium
CVE-2024-0515
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare
Medium
CVE-2023-5665
Payment Forms for Paystack <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1089
ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in optimizeAllOn
Critical
CVE-2024-1207
Booking Calendar <= 9.9 - Unauthenticated SQL Injection
Medium
CVE-2024-1235
Elementor Addons by Livemesh <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1338
ImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in stopOptimizeAll
High
CVE-2024-24934
Elementor <= 3.19.0 - Authenticated(Contributor+) Arbitrary File Deletion and PHAR Deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.