Medium
CVE-2024-32447
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-32148
Pardot <= 2.1.0 - Missing Authorization
Medium
CVE-2024-32437
eCommerce Product Catalog <= 3.3.28 - Cross-Site Request Forgery
Medium
CVE-2024-3662
WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion
Medium
CVE-2024-3637
Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-32143
Podlove Podcast Publisher <= 4.1.0 - Missing Authorization
Medium
CVE-2024-32441
Zoho Campaigns <= 2.0.7 - Cross-Site Request Forgery via zcwc_optin_save
Medium
CVE-2024-32429
Remove Footer Credit <= 1.0.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-32436
Gift Vouchers <= 4.4.0 - Cross-Site Request Forgery
Medium
CVE-2024-32454
Appointment Bookings for Zoom GoogleMeet and more – Wappointment <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2024-32439
WP Client Reports <= 1.0.22 - Cross-Site Request Forgery
Medium
CVE-2024-3233
Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation
Medium
CVE-2024-32145
WP Google Analytics Events <= 2.8.0 - Reflected Cross-Site Scripting
Critical
CVE-2024-32139
Podlove Podcast Publisher <= 4.0.12 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-32449
RestroPress <= 3.1.2 - Cross-Site Request Forgery via rpress_orders_list_table_process_bulk_actions
Critical
CVE-2024-32137
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-32446
Wallet System for WooCommerce <= 2.5.9 - Cross-Site Request Forgery
Critical
CVE-2024-32135
Disable Comments | WPZest <= 1.51 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-32136
BWL Advanced FAQ Manager <= 2.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-32430
ActiveCampaign <= 8.1.14 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2024-32435
AffiEasy <= 1.1.4 - Cross-Site Request Forgery
Critical
CVE-2024-32132
CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-32432
Ovic Addon Toolkit <= 2.6.1 - Missing Authorization
Medium
CVE-2024-32147
Easy Contact Form Lite <= 1.1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.