Medium
CVE-2024-32085
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-3472
Modal Window – create popup modal window <= 5.3.9 - Cross-Site Request Forgery
Medium
CVE-2024-0908
Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure
Medium
CVE-2024-3471
Button Generator – easily Button Builder <= 2.3.9 - Cross-Site Request Forgery
Medium
CVE-2024-32081
Filter Custom Fields & Taxonomies Light <= 1.05 - Missing Authorization
Medium
CVE-2024-32106
WP Compress – Image Optimizer [All-In-One] <= 6.10.35 - Cross-Site Request Forgery
Medium
CVE-2024-32079
Advanced iFrame <= 2024.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-32092
Kimili Flash Embed <= 2.5.3 - Cross-Site Request Forgery
Medium
CVE-2024-32097
GEO my WordPress <= 4.1 - Cross-Site Request Forgery
Medium
CVE-2024-1805
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute
Medium
CVE-2024-3475
Sticky Buttons – floating buttons builder <= 3.2.3 - Cross-Site Request Forgery
High
CVE-2024-32086
Citadela Listing <= 5.18.1 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1842
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute
Medium
CVE-2024-32088
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.15.20 - Cross-Site Request Forgery to Notice Dismissal
High
CVE-2024-3211
Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-3478
Herd Effects – fake notifications and social proof plugin <= 5.2.6 - Cross-Site Request Forgery
Critical
CVE-2024-32098
Advanced Page Visit Counter <= 8.0.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-2867
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-32087
Product Feed on WooCommerce for Google <= 3.5.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-3476
Side Menu Lite – add sticky fixed buttons <= 4.2 - Cross-Site Request Forgery
Medium
CVE-2024-32110
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
Medium
CVE-2024-32078
FV Flowplayer Video Player <= 7.5.44.7212 - Authenticated (Contributor+) Arbitrary Redirect
Medium
CVE-2024-1841
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
Medium
CVE-2024-32102
Crony Cronjob Manager <= 0.5.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.