Critical
CVE-2024-32136
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-32430
ActiveCampaign <= 8.1.14 - Authenticated (Administrator+) Server-Side Request Forgery
Critical
CVE-2024-32132
CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-32134
Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook <= 1.1.12 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-32128
Realtyna Organic IDX plugin <= 4.14.4 - Unauthenticated SQL Injection
Critical
CVE-2024-32127
Find Duplicates <= 1.4.6 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-32125
BA Book Everything <= 1.6.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-32107
Finale Lite <= 2.18.0 - Cross-Site Request Forgery
High
CVE-2024-32086
Citadela Listing <= 5.18.1 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-3211
Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-32098
Advanced Page Visit Counter <= 8.0.6 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-32087
Product Feed on WooCommerce for Google <= 3.5.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-32110
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
Medium
CVE-2024-31426
Inline Related Posts <= 3.3.1 - Cross-Site Request Forgery
Medium
CVE-2024-2966
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search
Medium
CVE-2024-31924
EWWW Image Optimizer <= 7.2.3 - Cross-Site Request Forgery
Critical
CVE-2024-31370
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-1042
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions
High
CVE-2023-7046
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score <= 7.0 - Sensitive Information Exposure via insufficiently protected files
High
CVE-2024-2018
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-31355
Slideshow Gallery <= 1.7.8 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-31356
User Activity Log <= 1.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-31353
Slideshow Gallery <= 1.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-3097
WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.