CVEs published March 16, 2024
50 CVEs were published on March 16, 2024: 1 critical, 8 high.
- Published
- 50
- Critical
- 1
- High
- 8
- Medium
- 32
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- MAGESH-K21 Online-College-Event-Hall-Reservation-System
- 20
- roxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- 3
- Andrei Ivasiuc Fontific | Google Fonts
- 1
- ARI Soft ARI Stream Quiz
- 1
- Atlas Gondal Export Media URLs
- 1
- Automattic Crowdsignal Dashboard – Polls, Surveys & more
- 1
- Averta Depicter Slider
- 1
- BeePress
- 1
- charlestsmith Word Replacer Pro
- 1
- djangorestframework-simplejwt
- 1
Critical 1
High 8
- CVE-2024-1685Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injectionsygnoos Social Media Share Buttons
- CVE-2024-22259CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)Spring Framework · org.springframework:spring-web
- CVE-2024-27194WordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerabilityAndrei Ivasiuc Fontific | Google Fonts
- CVE-2024-27195WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerabilitysverde1 Watermark RELOADED
- CVE-2024-27197WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityBeePress
- CVE-2023-51474WordPress TerraClassifieds plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerabilityPixelemu TerraClassifieds
- CVE-2024-28069A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to
- CVE-2024-28640Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause
Medium, low and unrated 41
- CVE-2024-2534MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2533MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2532MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2531MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php unrestricted uploadMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2530MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2529MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php unrestricted uploadMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2528MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2527MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2526MAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2525MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2524MAGESH-K21 Online-College-Event-Hall-Reservation-System receipt.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2523MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2522MAGESH-K21 Online-College-Event-Hall-Reservation-System booktime.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2521MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2520MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2519MAGESH-K21 Online-College-Event-Hall-Reservation-System navbar.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2518MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2517MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2516MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php sql injectionMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-2515MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php cross site scriptingMAGESH-K21 Online-College-Event-Hall-Reservation-System
- CVE-2024-1857Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposurewpswings Ultimate Gift Cards for WooCommerce
- CVE-2024-1733Word Replacer Pro <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Content Updatecharlestsmith Word Replacer Pro
- CVE-2024-24845WordPress Post Thumbnail Editor plugin <= 2.4.8 - Unauthenticated Sensitive Data Exposure vulnerabilitySewpafly Post Thumbnail Editor
- CVE-2024-23523WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerabilityElementor Pro
- CVE-2023-6525ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- CVE-2024-2042ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widgetroxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- CVE-2024-1239ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- CVE-2024-2294Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversalsoftaculous Backuply – Backup, Restore, Migrate and Clone
- CVE-2024-2308ElementInvader Addons for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingElementInvader Addons for Elementor
- CVE-2023-51486WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerabilityRedNao WooCommerce PDF Invoice Builder
- CVE-2023-51487WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.2.32 - Cross Site Request Forgery (CSRF) vulnerabilityARI Soft ARI Stream Quiz
- CVE-2023-51489WordPress Crowdsignal Polls & Ratings plugin <= 3.0.11 - Cross Site Request Forgery (CSRF) vulnerabilityAutomattic Crowdsignal Dashboard – Polls, Surveys & more
- CVE-2023-51491WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerabilityAverta Depicter Slider
- CVE-2023-51510WordPress Export Media URLs plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilityAtlas Gondal Export Media URLs
- CVE-2023-51512WordPress Product Table by WBW plugin <= 1.8.6 - Cross Site Request Forgery (CSRF) vulnerabilityProduct Table by WBW
- CVE-2023-51521WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerabilityExpressTech Quiz And Survey Master
- CVE-2023-51407WordPress Split Test For Elementor plugin <= 1.6.9 - Cross Site Request Forgery (CSRF) vulnerabilityRocket Elements Split Test For Elementor
- CVE-2023-36483MAS (a Carrier brand) MASmobile Classic Authorization BypassMAS (a Carrier brand) MASmobile Classic · MAS (a Carrier br…
- CVE-2024-22513djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure.djangorestframework-simplejwt
- CVE-2024-24156Cross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attacke
- CVE-2024-28070A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to