Medium
CVE-2024-32718
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2024-32812
Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-32775
Embed Google Photos album <= 2.1.9 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2024-32830
BuddyForms <= 2.8.8 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
High
CVE-2024-1567
Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload
Critical
CVE-2024-28890
Forminator <= 1.28.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-3729
Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation
High
CVE-2024-3813
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
High
CVE-2024-3849
Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-3812
Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
High
CVE-2024-3810
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Critical
CVE-2024-32680
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.2 - Authenticated (Subscriber+) Remote Code Execution
Critical
CVE-2024-32599
WP Dummy Content Generator <= 3.2.1 - Unauthenticated Code Injection
Medium
CVE-2023-6805
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)
Medium
CVE-2024-31229
Really Simple SSL <= 7.2.3 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2024-32514
Poll Maker <= 3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-32523
Mailster <= 4.0.6 - Unauthenticated Local File Inclusion
Medium
CVE-2024-32454
Appointment Bookings for Zoom GoogleMeet and more – Wappointment <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2024-32430
ActiveCampaign <= 8.1.14 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2023-6964
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)
Critical
CVE-2024-31292
Import XML and RSS Feeds <= 2.1.5 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2024-31300
Easy Social Share Buttons <= 9.4 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2024-31280
Church Admin <= 4.1.5 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-31266
Advanced Order Export For WooCommerce <= 3.4.4 - Authenticated (Shop Manager+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.