Advisories · Technology

captivateaudio Captivate Sync.

Every CVE that names captivateaudio Captivate Sync among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-62060 CVE record

CVSS 7.6 High

WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability
- captivateaudio Captivate Sync
- SQL injection
Not analysed yet 1 Oct 2026
CVE-2025-68570 CVE record

CVSS 7.6 High

WordPress Captivate Sync plugin <= 3.2.2 - SQL Injection vulnerability
- captivateaudio Captivate Sync
- SQL injection
Not analysed yet 24 Dec 2025
CVE-2025-60221 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability
- captivateaudio Captivate Sync
- Insecure deserialization
Not analysed yet 22 Oct 2025
CVE-2024-53820 CVE record

CVSS 6.5 Medium

WordPress Captivate Sync plugin <= 2.0.22 - Cross Site Scripting (XSS) vulnerability
- captivateaudio Captivate Sync
- Cross-site scripting (XSS)
Not analysed yet 6 Dec 2024