Medium
CVE-2024-32428
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-32445
WebinarIgnition <= 3.05.8 - Cross-Site Request Forgery
Medium
CVE-2024-32101
Email Marketing for WooCommerce by Omnisend <= 1.14.3 - Cross-Site Request Forgery
Medium
CVE-2024-32099
WP Mail Catcher <= 2.1.6 - Cross-Site Request Forgery
High
CVE-2024-3054
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-32088
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.15.20 - Cross-Site Request Forgery to Notice Dismissal
Medium
CVE-2024-2867
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32110
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
Medium
CVE-2024-31378
MailChimp Forms by MailMunch <= 3.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-31434
Newsletter <= 8.0.6 - Cross-Site Request Forgery
Medium
CVE-2024-2966
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search
High
CVE-2023-6811
Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key
Medium
CVE-2024-3210
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-single-checkbox'
High
CVE-2024-3020
Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injection
Critical
CVE-2024-31370
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2664
Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2665
Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
Medium
CVE-2024-2734
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
Medium
CVE-2024-2666
Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-0376
Premium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link Widget
Medium
CVE-2024-29220
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-26019
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2505
GamiPress <= 6.8.8 - Broken Access Control
Medium
CVE-2024-31360
Benchmark Email Lite <= 4.1 - Cross-Site Request Forgery via page_settings()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.