High
CVE-2024-32652
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-22640
TCPDF vulnerable to Regular Expression Denial of Service
Low
ghsa-23q2-5gf8-gjpp
Enabling Authentication does not close all logged in socket connections immediately
Medium
CVE-2024-1730
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2417
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-32694
3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin <= 3.62 - Reflected Cross-Site Scripting
Medium
CVE-2024-32690
RSS Feed Widget <= 2.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1057
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3940
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-2749
VikBooking Hotel Booking Engine & PMS <= 1.6.7 - Missing Authorization
Medium
CVE-2024-3891
Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Medium
CVE-2024-3287
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.2 - Missing Authorization
Medium
CVE-2024-32695
Language Switcher for Transposh <= 1.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2024-32696
AI Infographic Maker <= 4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3724
Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline
Medium
CVE-2024-3645
Essential Addons for Elementor Pro <= 5.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_html_tag'
High
CVE-2024-1567
Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload
Medium
CVE-2024-2441
VikBooking Hotel Booking Engine & PMS <= 1.6.7 - Insecure Direct Object Reference to Menu Access
Medium
CVE-2024-32698
Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1993
Icon Widget <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-33681
Regenerate post permalink <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2024-32693
WordPress Automatic Plugin <= 3.92.1 Cross-Site Request Forgery
Medium
CVE-2024-4014
hCaptcha for WordPress <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7-hcaptcha Shortcode
Medium
CVE-2024-3941
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.