Medium
CVE-2024-23515
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-0791
WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorization
High
CVE-2024-1069
Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
08b75cac-7b1d-4bed-a1b7-bd1e872f2b4f
Fatal Error Notify <= 1.5.2 - Cross-Site Request Forgery to Test Error Email Sending
Medium
CVE-2024-23829
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
High
CVE-2024-23334
aiohttp is vulnerable to directory traversal
Critical
CVE-2023-51839
DeviceFarmer stf uses DES-ECB
High
CVE-2023-51842
MeshCentral algorithm-downgrade issue
High
CVE-2023-29055
Apache Kylin has Insufficiently Protected Credentials
Medium
CVE-2023-7225
MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings
Medium
CVE-2024-31941
CP Media Player <= 1.1.3 - Cross-Site Request Forgery to Player Deletion and Duplication
Medium
CVE-2024-0597
SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2024-0678
Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-0961
SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-6700
Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2024-0869
Instant Images <= 6.1.0 - Authenticated (Author+) Arbitrary Options Update
Medium
CVE-2024-0970
User Activity Tracking and Log <= 4.1.3 - IP Spoofing
Medium
CVE-2023-24407
Booking calendar, Appointment Booking System <= 3.2.3 - Missing Authorization
Critical
CVE-2024-0937
Deserialization of untrusted data in synthcity
High
CVE-2024-0936
A vulnerability classified as critical was found in van_der_Schaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function load_from_file of the component PKL File Handler. The manipulation
Medium
CVE-2023-6541
Allow SVG <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-0667
Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute
Medium
CVE-2024-0660
Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-6497
WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.