Low
CVE-2024-23686
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
ghsa-wg2x-rv86-mmpx
SPV Merkle proof malleability allows the maintainer to prove invalid transactions
High
CVE-2024-23331
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
Low
CVE-2024-23329
changedetection.io API endpoint is not secured with API token
High
CVE-2024-21484
Marvin Attack of RSA and RSAOAEP decryption in jsrsasign
Medium
CVE-2024-21733
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
Medium
CVE-2024-0679
ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2023-51415
GiveWP <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23504
Ninja Tables <= 5.0.5 - Missing Authorization
Medium
CVE-2023-6082
Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting via chart
Medium
CVE-2023-4637
WPvivid <= 0.9.94 - Missing Authorization
Critical
CVE-2024-0709
Cryptocurrency Widgets – Price Ticker & Coins List 2.0 - 2.6.5 - Unauthenticated SQL Injection
Medium
CVE-2024-22308
Simple Membership <= 4.4.1 - Open Redirect
Medium
CVE-2024-0623
VK Block Patterns <= 1.31.1.1 - Cross-Site Request Forgery
Critical
CVE-2024-22309
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-22307
WP-Lister Lite for eBay <= 3.5.7 - Reflected Cross-Site Scripting via 's'
Medium
CVE-2023-6499
lasTunes <= 3.6.1 - Cross-Site Request Forgery
Medium
CVE-2024-23505
PDF Viewer & 3D PDF Flipbook – DearPDF <= 2.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22310
Formzu WP <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0691
FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
Medium
CVE-2023-6081
Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-23502
Posts List Designer by Category – List Category Posts Or Recent Posts <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-0221
Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename
High
CVE-2023-7063
WPForms Pro 1.8.4 - 1.8.5.3 - Unauthenticated Stored Cross-Site Scripting via Form Submission
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.