Medium
CVE-2024-3027
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-32448
Ads.txt Admin <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2024-3692
Gutenverse <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-32134
Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook <= 1.1.12 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-32149
Jobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-32442
Zoho Campaigns <= 2.0.7 - Cross-Site Request Forgery via zcwc_integration_disconnect
Medium
CVE-2024-32453
POEditor <= 0.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3901
Genesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32452
WP EasyCart <= 5.5.19 - Cross-Site Request Forgery
Medium
CVE-2024-32443
Download IP2Location Country Blocker <= 2.34.2 - Cross-Site Request Forgery
Medium
CVE-2024-1957
GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-32144
Welcart e-Commerce <= 2.9.14 - Missing Authorization
Medium
CVE-2024-3275
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
Critical
CVE-2024-32128
Realtyna Organic IDX plugin <= 4.14.4 - Unauthenticated SQL Injection
Medium
CVE-2024-32138
Short URL <= 1.6.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-32146
Aspose.Words Exporter <= 6.3.1 - Missing Authorization
Medium
CVE-2024-32438
SEO Booster <= 3.8.9 - Cross-Site Request Forgery
High
CVE-2024-32431
Import Users from CSV <= 1.2 - Authenticated (Admin+) PHP Object Injection
Critical
CVE-2024-32127
Find Duplicates <= 1.4.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-6494
WPC Smart Quick View for WooCommerce <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-32450
WpTravelly <= 1.6.0 - Cross-Site Request Forgery
Medium
CVE-2024-32131
Download Manager <= 3.2.82 - Password Protected File Bypass
Medium
CVE-2024-32129
Freshdesk (official) <= 2.3.6 - Open Redirect
Medium
CVE-2024-32140
Libsyn Publisher Hub <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.