CVEs published March 23, 2024
17 CVEs were published on March 23, 2024: 0 critical, 6 high.
- Published
- 17
- Critical
- 0
- High
- 6
- Medium
- 10
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- wpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…
- 2
- BdThemes Element Pack Elementor Addons
- 1
- Campcodes Online Shopping System
- 1
- godaddy Page Builder Gutenberg Blocks – CoBlocks
- 1
- gpriday Page Builder by SiteOrigin
- 1
- Metagauss EventPrime
- 1
- moveaddons Move Addons for Elementor
- 1
- openEuler aops-ceres
- 1
- paddlepaddle/paddle · paddlepaddle
- 1
- realmag777 BEAR
- 1
High 6
- CVE-2024-1603confirmedpaddlepaddle/paddle · paddlepaddle
- CVE-2024-24832WordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerabilityMetagauss EventPrime
- CVE-2021-33633Command Injection in aops-ceresopenEuler aops-ceres
- CVE-2024-2025BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_requestthemekraft BuddyPress WooCommerce My Account Integration. C…
- CVE-2024-23755ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses.
- CVE-2024-24725Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the mod
Medium, low and unrated 11
- CVE-2024-2849SourceCodester Simple File Manager unrestricted uploadSourceCodester Simple File Manager
- CVE-2024-24835WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerabilityrealmag777 BEAR
- CVE-2024-24840WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerabilityBdThemes Element Pack Elementor Addons
- CVE-2024-2832Campcodes Online Shopping System offersmail.php cross site scriptingCampcodes Online Shopping System
- CVE-2024-2326Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Updatesupercleanse PrettyLinks – Affiliate Links, Link Branding,…
- CVE-2024-1049Page Builder Gutenberg Blocks – CoBlocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scriptinggodaddy Page Builder Gutenberg Blocks – CoBlocks
- CVE-2024-2468EmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attributewpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…
- CVE-2024-2688EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated (Contributor+) Stored Cross-site Scripting via 'embedpress_doc_custom_color'wpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…
- CVE-2024-2202Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widgetgpriday Page Builder by SiteOrigin
- CVE-2024-2131Move Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingmoveaddons Move Addons for Elementor
- CVE-2024-1697Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scriptingthemelocation Custom WooCommerce Checkout Fields Editor