Medium
CVE-2024-3481
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-32084
Before And After <= 3.9 - Cross-Site Request Forgery
Medium
CVE-2024-32082
Sync Post With Other Site <= 1.5.1 - Cross-Site Request Forgery
High
CVE-2024-3054
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-2801
Shopkeeper Extender <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32104
NextMove Lite <= 2.18.1 - Cross-Site Request Forgery
Medium
CVE-2024-32091
Sangar Slider <= 1.3.2 - Cross-Site Request Forgery
Medium
CVE-2024-3474
Wow Skype Buttons <= 4.0.3 - Cross-Site Request Forgery
Medium
CVE-2024-32107
Finale Lite <= 2.18.0 - Cross-Site Request Forgery
Medium
CVE-2024-32090
Church Admin <= 4.0.27 - Cross-Site Request Forgery
Medium
CVE-2024-32085
Citadela Listing < 5.20.0 - Cross-Site Request Forgery
Medium
CVE-2024-3472
Modal Window – create popup modal window <= 5.3.9 - Cross-Site Request Forgery
Medium
CVE-2024-0908
Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure
Medium
CVE-2024-3471
Button Generator – easily Button Builder <= 2.3.9 - Cross-Site Request Forgery
Medium
CVE-2024-32081
Filter Custom Fields & Taxonomies Light <= 1.05 - Missing Authorization
Medium
CVE-2024-32106
WP Compress – Image Optimizer [All-In-One] <= 6.10.35 - Cross-Site Request Forgery
Medium
CVE-2024-32079
Advanced iFrame <= 2024.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-32092
Kimili Flash Embed <= 2.5.3 - Cross-Site Request Forgery
Medium
CVE-2024-32097
GEO my WordPress <= 4.1 - Cross-Site Request Forgery
Medium
CVE-2024-1805
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute
Medium
CVE-2024-3475
Sticky Buttons – floating buttons builder <= 3.2.3 - Cross-Site Request Forgery
High
CVE-2024-32086
Citadela Listing <= 5.18.1 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1842
WPBakery Visual Composer <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute
Medium
CVE-2024-32088
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.15.20 - Cross-Site Request Forgery to Notice Dismissal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.