Medium
CVE-2024-32594
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
CVE-2024-32600
Master Slider <= 3.9.5 - Unauthenticated PHP Object Injection
Medium
CVE-2024-3606
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization
Medium
CVE-2024-32598
BA Book Everything <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3333
Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute
Medium
CVE-2024-32569
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2024-32599
WP Dummy Content Generator <= 3.2.1 - Unauthenticated Code Injection
Medium
CVE-2024-0615
Content Control <= 2.1.0 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-32591
Backend Designer <= 1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-32142
Ovic Responsive WPBakery <= 1.3.0 - Missing Authorization
High
CVE-2024-32562
Zynith SEO <= 7.4.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-32574
WordPress Simple HTML Sitemap <= 2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-32604
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Insecure Direct Object Reference
Medium
CVE-2024-2084
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget
Critical
CVE-2024-32602
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.3.1 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2024-32560
QR Code Composer – Automatic QR code Generator <= 2.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-32568
WP 2FA – Two-factor authentication for WordPress <= 2.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2346
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference
Medium
CVE-2024-32554
Knight Lab Timeline <= 3.9.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32553
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-32585
Import Content in WordPress & WooCommerce with Excel <= 4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2043
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-32542
Bulk Block Converter <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-32565
App Builder <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.