Critical
CVE-2024-32139
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,504
Medium
CVE-2024-32449
RestroPress <= 3.1.2 - Cross-Site Request Forgery via rpress_orders_list_table_process_bulk_actions
Critical
CVE-2024-32137
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-32446
Wallet System for WooCommerce <= 2.5.9 - Cross-Site Request Forgery
Critical
CVE-2024-32135
Disable Comments | WPZest <= 1.51 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2024-32136
BWL Advanced FAQ Manager <= 2.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-32430
ActiveCampaign <= 8.1.14 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2024-32435
AffiEasy <= 1.1.4 - Cross-Site Request Forgery
Critical
CVE-2024-32132
CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-32432
Ovic Addon Toolkit <= 2.6.1 - Missing Authorization
Medium
CVE-2024-32147
Easy Contact Form Lite <= 1.1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3027
Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload
Medium
CVE-2024-32448
Ads.txt Admin <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2024-3692
Gutenverse <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-32134
Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook <= 1.1.12 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-32149
Jobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-32442
Zoho Campaigns <= 2.0.7 - Cross-Site Request Forgery via zcwc_integration_disconnect
Medium
CVE-2024-32453
POEditor <= 0.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-3901
Genesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-32452
WP EasyCart <= 5.5.19 - Cross-Site Request Forgery
Medium
CVE-2024-32443
Download IP2Location Country Blocker <= 2.34.2 - Cross-Site Request Forgery
Medium
CVE-2024-1957
GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-32144
Welcart e-Commerce <= 2.9.14 - Missing Authorization
Medium
CVE-2024-3275
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.