Critical
CVE-2024-32087
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-3476
Side Menu Lite – add sticky fixed buttons <= 4.2 - Cross-Site Request Forgery
Medium
CVE-2024-32110
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
Medium
CVE-2024-32078
FV Flowplayer Video Player <= 7.5.44.7212 - Authenticated (Contributor+) Arbitrary Redirect
Medium
CVE-2024-1841
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
Medium
CVE-2024-32102
Crony Cronjob Manager <= 0.5.0 - Cross-Site Request Forgery
Medium
CVE-2024-2405
Float menu – awesome floating side menu <= 6.0 - Cross-Site Request Forgery to Menu Deletion
Medium
CVE-2024-2137
All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets
Medium
CVE-2024-32105
ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-32083
Easy Logo <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-32109
WP Matterport Shortcode <= 2.1.9 - Cross-Site Request Forgery
Medium
CVE-2024-32095
MultiParcels Shipping For WooCommerce < 1.16.9 - Cross-Site Request Forgery
Medium
CVE-2024-32108
Convert Post Types <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2024-32093
Novelist <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2024-31435
Inisev Analyst Module <= Various Versions - Missing Authorization
Medium
CVE-2024-31423
WP Accessibility Helper (WAH) <= 0.6.2.5 - Missing Authorization
Medium
CVE-2024-31376
Dashboard To-Do List <= 1.3.1 - Cross-Site Request Forgery via ardtdw_widgetupdate()
Medium
CVE-2024-31931
Save as Image <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31943
USPS Shipping for WooCommerce – Live Rates <= 1.9.2 - Cross-Site Request Forgery
Medium
CVE-2024-31922
WordPress Hosting Benchmark tool <= 1.3.6 - Cross-Site Request Forgery via execute_plugin()
Medium
CVE-2024-31389
MihanPanel <= 12.4 - Cross-Site Request Forgery
Medium
CVE-2024-31425
Amelia <= 1.0.95 - Cross-Site Request Forgery
Medium
CVE-2024-3344
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting
Medium
CVE-2024-31933
Page Builder: Live Composer <= 1.5.35 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.