Medium
CVE-2024-3755
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-0613
Delete Custom Fields <= 0.3.1 - Cross-Site Request Forgery to Post Meta Deletion
Medium
CVE-2024-0629
2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins
Medium
CVE-2024-32520
WPC Grouped Product for WooCommerce <= 4.4.2 - Missing Authorization
Medium
CVE-2024-32536
WP TradingView <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32505
ElementsKit Elementor addons Lite <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3672
BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-32517
Custom Thank You Page Customize For WooCommerce by Binary Carpenter <= 1.4.13 - Missing Authorization
Medium
CVE-2024-3215
Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery
Medium
CVE-2024-3752
Crelly Slider <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3517
Shortcodes and extra features for Phlox theme <= 2.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Widget
Medium
CVE-2024-32544
Netgsm <= 2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-3243
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Medium
CVE-2024-1306
Smart Forms <= 2.6.93 - Cross-Site Request Forgery
Medium
CVE-2024-32529
Yoga Schedule Momoyoga <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32528
WP Dynamic Keywords Injector <= 2.3.21 - Reflected Cross-Site Scripting
High
CVE-2024-32507
Login with phone number <= 1.7.16 - Unauthorized Account Password Change to Privilege Escalation
Medium
CVE-2024-32522
Open Close WooCommerce Store <= 4.9.1 - Missing Authorization
Medium
CVE-2024-32506
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.73 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Critical
CVE-2024-32514
Poll Maker <= 3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-1533
Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32531
GuCherry Blog <= 1.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-32534
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.23 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3869
Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.