Medium
CVE-2024-32716
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Medium
CVE-2024-32727
RomethemeForm For Elementor <= 1.1.2 - Missing Authorization
Medium
CVE-2024-32797
WP LinkedIn Auto Publish <= 8.11 - Missing Authorization
Medium
CVE-2024-32792
Hummingbird <= 3.7.3 - Missing Authorization
Medium
CVE-2024-32777
BizPrint <= 4.3.39 - Missing Authorization via showTemplatePreview()
Medium
CVE-2024-32818
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3 - Missing Authorization
Medium
CVE-2024-32808
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference
Medium
CVE-2024-32724
Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy <= 2.1.1 - Unauthenticated Arbitrary Content Deletion
Medium
CVE-2024-32795
WPCal.io – Easy Meeting Scheduler <= 0.9.5.8 - Cross-Site Request Forgery
Medium
CVE-2024-32952
Max Addons Pro for Bricks <= 1.6.1 - Reflected Cross-Site Scripting
Unrated
CVE-2024-31584
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
Medium
CVE-2024-1681
flask-cors vulnerable to log injection when the log level is set to debug
High
CVE-2024-32652
@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed
Medium
CVE-2024-22640
TCPDF vulnerable to Regular Expression Denial of Service
Low
ghsa-23q2-5gf8-gjpp
Enabling Authentication does not close all logged in socket connections immediately
Medium
CVE-2024-1730
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-2417
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-32694
3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin <= 3.62 - Reflected Cross-Site Scripting
Medium
CVE-2024-32690
RSS Feed Widget <= 2.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1057
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3940
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-2749
VikBooking Hotel Booking Engine & PMS <= 1.6.7 - Missing Authorization
Medium
CVE-2024-3891
Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Medium
CVE-2024-3287
SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.