Medium
CVE-2024-32726
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-32780
VikRentCar Car Rental Management System <= 1.3.2 - Information Exposure
High
CVE-2024-32706
ARforms <= 6.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-32811
USPS Shipping for WooCommerce – Live Rates <= 1.9.4 - Sensitive Information Exposure
Critical
CVE-2024-32710
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-32953
Newsletters <= 4.9.5 - Information Exposure via Log files
Critical
CVE-2024-32709
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Unauthenticated SQL Injection
High
CVE-2024-3293
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
Medium
CVE-2024-3601
Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration
Critical
CVE-2024-31077
Forminator <= 1.29.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-1076
SSL Zen – Free Let's Encrypt SSL Certificate & HTTPS/SSL Redirect WordPress Plugin <= 4.5.0 - Sensitive Information Exposure
Medium
CVE-2024-32686
Backup Migration <= 1.4.3 - Information Exposure via Log Files
Medium
CVE-2024-32678
TrackShip for WooCommerce <= 1.7.5 - Missing Authorization
Medium
CVE-2024-0615
Content Control <= 2.1.0 - Missing Authorization to Sensitive Information Exposure
Critical
CVE-2024-32602
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.3.1 - Authenticated (Shop Manager+) SQL Injection
Critical
CVE-2024-32551
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton
High
CVE-2023-6214
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products
Critical
CVE-2024-2876
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
Medium
CVE-2024-32506
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.73 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
High
CVE-2024-3067
WooCommerce Google Feed Manager <= 2.4.2 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Medium
CVE-2024-32145
WP Google Analytics Events <= 2.8.0 - Reflected Cross-Site Scripting
Critical
CVE-2024-32139
Podlove Podcast Publisher <= 4.0.12 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-32137
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-32135
Disable Comments | WPZest <= 1.51 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.