Medium
CVE-2024-32560
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-32568
WP 2FA – Two-factor authentication for WordPress <= 2.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2346
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference
Medium
CVE-2024-32554
Knight Lab Timeline <= 3.9.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32553
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-32585
Import Content in WordPress & WooCommerce with Excel <= 4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-2043
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-32542
Bulk Block Converter <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-32565
App Builder <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-32573
WP-Lister Lite for eBay <= 3.5.11 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2023-49768
WP-FormAssembly <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32592
Void Elementor WHMCS Elements For Elementor Page Builder <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-32551
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton
Medium
CVE-2024-32570
Cornerstone <= 0.8.0 - Reflected Cross-Site Scripting via PHP_SELF
Medium
CVE-2024-32556
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-6214
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products
Medium
CVE-2024-2790
HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ
Medium
CVE-2024-32587
EnvíaloSimple: Email Marketing y Newsletters <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-3599
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.0.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2023-6805
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)
Medium
CVE-2024-32575
Mega Elements <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-49742
Support Genix <= 1.2.3 - Missing Authorization
Medium
CVE-2024-32596
DSGVO Youtube <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-31229
Really Simple SSL <= 7.2.3 - Authenticated (Admin+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.