Low
CVE-2024-32790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
High
CVE-2024-3293
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
Medium
CVE-2024-2750
Exclusive Addons for Elementor <= 2.6.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Medium
CVE-2024-32815
All-in-one Like Widget <= 2.2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-32791
Premium Addons for Elementor <= 4.10.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32701
InstaWP Connect <= 0.1.0.24 - Missing Authorization
Medium
CVE-2024-32804
WP GoToWebinar <= 14.46 - Missing Authorization
Medium
CVE-2024-32775
Embed Google Photos album <= 2.1.9 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2024-32786
Royal Elementor Addons <= 1.3.93 - Unauthenticated IP Spoofing
Medium
CVE-2024-32793
Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery
Medium
CVE-2024-32783
Advanced Testimonial Carousel for Elementor <= 3.0.0 - Missing Authorization
Medium
CVE-2024-32779
Vision Interactive <= 1.7.1 - Missing Authorization
Medium
CVE-2024-32782
HT Mega – Absolute Addons For Elementor <= 2.4.7 - Missing Authorization to Information Exposure
Critical
CVE-2024-32830
BuddyForms <= 2.8.8 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
Medium
CVE-2024-32824
Evergreen Content Poster <= 1.4.2 - Missing Authorization
Medium
CVE-2024-3665
Rank Math SEO with AI SEO Tools <= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper'
Medium
CVE-2024-3985
Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action
Medium
CVE-2024-32802
BP Better Messages <= 2.4.32 - Missing Authorization
Medium
CVE-2024-32829
Data Tables Generator by Supsystic <= 1.10.31 - Missing Authorization
Medium
CVE-2024-32796
WP Fusion Lite – Marketing Automation and CRM Integration for WordPress <= 3.42.10 - Information Exposure
Medium
CVE-2024-32708
Maintenance Mode by helderk <= 3.0.1 - Unauthenticated IP Spoofing
Medium
CVE-2024-1959
Social Sharing Plugin – Social Warfare <= 4.4.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-32949
Integrate Google Drive <= 1.3.8 - Missing Authorization
Medium
CVE-2024-32776
AppPresser <= 4.3.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.