U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
There are 232,591 matching records.
Displaying matches 1 through 20.
Vuln ID Summary CVSS Severity
CVE-2024-32953

Insertion of Sensitive Information into Log File vulnerability in Newsletters.This issue affects Newsletters: from n/a through 4.9.5.

Published: April 24, 2024; 4:15:41 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32836

Unrestricted Upload of File with Dangerous Type vulnerability in WP Lab WP-Lister Lite for eBay.This issue affects WP-Lister Lite for eBay: from n/a through 3.5.11.

Published: April 24, 2024; 4:15:41 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32835

Deserialization of Untrusted Data vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.3.

Published: April 24, 2024; 4:15:41 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32825

Insertion of Sensitive Information into Log File vulnerability in Patrick Posner Simply Static.This issue affects Simply Static: from n/a through 3.1.3.

Published: April 24, 2024; 4:15:41 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32817

Deserialization of Untrusted Data vulnerability in Import and export users and customers.This issue affects Import and export users and customers: from n/a through 1.26.2.

Published: April 24, 2024; 4:15:40 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32816

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid.This issue affects Post Grid: from n/a through 2.2.78.

Published: April 24, 2024; 4:15:40 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32812

Server-Side Request Forgery (SSRF) vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11.

Published: April 24, 2024; 4:15:40 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32803

Server-Side Request Forgery (SSRF) vulnerability in 2day.Sk, Webikon SuperFaktura WooCommerce.This issue affects SuperFaktura WooCommerce: from n/a through 1.40.3.

Published: April 24, 2024; 4:15:40 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32796

Insertion of Sensitive Information into Log File vulnerability in Very Good Plugins WP Fusion Lite.This issue affects WP Fusion Lite: from n/a through 3.42.10.

Published: April 24, 2024; 4:15:40 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32788

Insertion of Sensitive Information into Log File vulnerability in Frédéric GILLES FG Joomla to WordPress.This issue affects FG Joomla to WordPress: from n/a through 4.20.2.

Published: April 24, 2024; 4:15:39 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32782

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HasThemes HT Mega.This issue affects HT Mega: from n/a through 2.4.7.

Published: April 24, 2024; 4:15:39 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32781

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.This issue affects Email Customizer for WooCommerce: from n/a through 2.6.0.

Published: April 24, 2024; 4:15:39 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32780

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in E4J s.R.L. VikRentCar.This issue affects VikRentCar: from n/a through 1.3.2.

Published: April 24, 2024; 4:15:39 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32775

Server-Side Request Forgery (SSRF) vulnerability in Pavex Embed Google Photos album.This issue affects Embed Google Photos album: from n/a through 2.1.9.

Published: April 24, 2024; 4:15:39 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32726

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in vinoth06. Frontend Dashboard.This issue affects Frontend Dashboard: from n/a through 2.2.2.

Published: April 24, 2024; 4:15:38 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32718

Server-Side Request Forgery (SSRF) vulnerability in Webangon The Pack Elementor.This issue affects The Pack Elementor addons: from n/a through 2.0.8.2.

Published: April 24, 2024; 4:15:38 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32716

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StreamWeasels StreamWeasels Twitch Integration.This issue affects StreamWeasels Twitch Integration: from n/a through 1.7.8.

Published: April 24, 2024; 4:15:38 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32710

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5.

Published: April 24, 2024; 4:15:38 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-32709

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5.

Published: April 24, 2024; 4:15:38 AM -0400
V3.x:(not available)
V2.0:(not available)
CVE-2024-28977

Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem with the privileges of the running web application.

Published: April 24, 2024; 4:15:37 AM -0400
V3.x:(not available)
V2.0:(not available)