Medium
CVE-2024-0701
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-0963
Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-24841
Add Customer for WooCommerce <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1162
Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery
Medium
CVE-2024-0954
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1046
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0844
Popup More <= 2.2.4 - Authenticated (Admin+) Directory Traversal to Limited Local File Inclusion
Medium
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
Medium
CVE-2024-0685
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
Medium
CVE-2024-1073
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-58379
nodemailer ReDoS when trying to send a specially crafted email
Medium
CVE-2024-23637
OctoPrint Unverified Password Change via Access Control Settings
Medium
ghsa-29w6-c52g-m8jc
C5 Firefly III CSV Injection.
Medium
CVE-2024-24566
@lobehub/chat vulnerable to unauthorized access to plugins
Unrated
CVE-2024-13243
drupal/entity_delete_log - SA-CONTRIB-2024-007
Medium
CVE-2023-47116
Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
Low
CVE-2024-22236
Spring Cloud Contract vulnerable to local information disclosure
Medium
CVE-2024-24799
WooCommerce Box Office <= 1.2.2 - Missing Authorization
Medium
CVE-2023-7204
WP STAGING WordPress Backup Plugin < 3.2.0 - Sensitive Information Exposure via cache files
Medium
CVE-2024-1130
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()
Medium
CVE-2024-24804
MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-6389
WordPress Toolbar Plugin <= 2.2.6 - Open Redirect via wptbto
Low
CVE-2024-24710
Feed Them Social <= 4.2.0 - Cross-Site Request Forgery via review_nag_check
Medium
CVE-2024-24708
W3SPEEDSTER <= 7.19 - Cross-Site Request Forgery via launch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.