CVEs published October 6, 2024
85 CVEs were published on October 6, 2024: 4 critical, 38 high.
- Published
- 85
- Critical
- 4
- High
- 38
- Medium
- 43
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- D-Link DIR-605L
- 13
- Atawai Gum Elementor Addon
- 2
- Elsight Halo
- 2
- NiceJob
- 2
- Amauri WPMobile.App
- 1
- arisoft ARI Fancy Lightbox
- 1
- Atakan Au Automatically Hierarchic Categories in Menu
- 1
- Axton WP-WebAuthn
- 1
- Ays Pro Chartify
- 1
- Ays Pro Secure Copy Content Protection and Content Locking
- 1
Critical 4
- CVE-2024-47350WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerabilityYITHEMES YITH WooCommerce Ajax Search
- CVE-2024-45252Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Elsight Halo
- CVE-2024-45251Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Elsight Halo
- CVE-2024-45249Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Cavok
High 38
- CVE-2024-9563D-Link DIR-605L formWlanSetup_Wizard buffer overflowD-Link DIR-605L
- CVE-2024-9562D-Link DIR-605L formSetWizard2 buffer overflowD-Link DIR-605L
- CVE-2024-9561D-Link DIR-605L formSetWAN_Wizard52 buffer overflowD-Link DIR-605L
- CVE-2024-9559D-Link DIR-605L formWlanSetup buffer overflowD-Link DIR-605L
- CVE-2024-9558D-Link DIR-605L formSetWanPPTP buffer overflowD-Link DIR-605L
- CVE-2024-9557D-Link DIR-605L formSetWanPPPoE buffer overflowD-Link DIR-605L
- CVE-2024-9556D-Link DIR-605L formSetEnableWizard buffer overflowD-Link DIR-605L
- CVE-2024-9555D-Link DIR-605L formSetEasy_Wizard buffer overflowD-Link DIR-605L
- CVE-2024-47338WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerabilitySaad Iqbal WPExperts Square For GiveWP
- CVE-2024-44028WordPress NiceJob plugin < 3.6.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityNiceJob
- CVE-2024-44029WordPress Viala theme <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityDavid Garlitz viala
- CVE-2024-45248Multi-DNC – CWE-35: Path Traversal: '.../...//'Multi-DNC
- CVE-2024-45246Diebold Nixdorf – CWE-427: Uncontrolled Search Path ElementDiebold Nixdorf Vynamic View prior to
- CVE-2024-45454WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2024-47297WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerabilitycodepeople CP Polls
- CVE-2024-47300WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityImran Tauqeer CubeWP Forms
- CVE-2024-47301WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerabilityBit Apps Bit Form
- CVE-2024-47306WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerabilityAys Pro Secure Copy Content Protection and Content Locking
- CVE-2024-47320WordPress WS Form LITE plugin <= 1.9.238 - Cross Site Scripting (XSS) vulnerabilityMark Westguard WS Form LITE
- CVE-2024-47322WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEx-Themes WP Timeline – Vertical and Horizontal timeline pl…
- CVE-2024-47326WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerabilityILLID Share This Image
- CVE-2024-47327WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEyal Fitoussi GEO my WordPress
- CVE-2024-47333WordPress Loops & Logic plugin <= 4.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityTangible Loops & Logic
- CVE-2024-47339WordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerabilityJWardee WP Mail Catcher
- CVE-2024-47341WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerabilityLester Chan WP-DownloadManager
- CVE-2024-9553D-Link DIR-605L formdumpeasysetup buffer overflowD-Link DIR-605L
- CVE-2024-47346WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityTribulant Software Newsletters
- CVE-2024-47347WordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerabilityAys Pro Chartify
- CVE-2024-47348WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerabilityYellowPencil Visual CSS Style Editor
- CVE-2024-47349WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerabilityAmauri WPMobile.App
- CVE-2024-47352WordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerabilityXylus Themes WP Bulk Delete
- CVE-2024-9552D-Link DIR-605L formSetWanNonLogin buffer overflowD-Link DIR-605L
- CVE-2024-47360WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerabilitybookingalgorithms BA Book Everything
- CVE-2024-47367WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerabilityYITHEMES YITH WooCommerce Product Add-Ons
- CVE-2024-9551D-Link DIR-605L formSetWanL2TP buffer overflowD-Link DIR-605L
- CVE-2024-9550D-Link DIR-605L formLogDnsquery buffer overflowD-Link DIR-605L
- CVE-2024-45245Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized ActorDiebold Nixdorf Vynamic View prior
- CVE-2024-9549D-Link DIR-605L formEasySetupWizard formEasySetupWizard2 buffer overflowD-Link DIR-605L
Medium, low and unrated 43
- CVE-2024-9560ESAFENET CDG Catelogs;logindojojs delCatelogs sql injectionESAFENET CDG
- CVE-2024-47650WordPress WP-WebAuthn plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerabilityAxton WP-WebAuthn
- CVE-2024-44010WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilitycatchthemes Full frame
- CVE-2024-44022WordPress Review & testimonial widgets plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityTrustmary Review & testimonial widgets
- CVE-2024-44024WordPress Medical Addon for Elementor plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Medical Addon for Elementor
- CVE-2024-44025WordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerabilityNiceJob
- CVE-2024-44026WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Charity Addon for Elementor
- CVE-2024-44027WordPress Gum Elementor Addon plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerabilityAtawai Gum Elementor Addon
- CVE-2024-44032WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Restaurant & Cafe Addon for Elementor
- CVE-2024-45250ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized ActorZKteco iClock v3.1-168
- CVE-2024-44033WordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Primary Addon for Elementor
- CVE-2024-44035WordPress Gum Elementor Addon plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityAtawai Gum Elementor Addon
- CVE-2024-44036WordPress Kodex Posts likes plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerabilityPierre Lebedel Kodex Posts likes
- CVE-2024-44037WordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerabilitymagepeopleteam Multipurpose Ticket Booking Manager
- CVE-2024-44039WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerabilityWP Travel
- CVE-2024-44040WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerabilityplainware ShiftController Employee Shift Scheduling
- CVE-2024-44041WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerabilityNorthern Beaches Websites IdeaPush
- CVE-2024-44042WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityFahad Mahmood WP Datepicker
- CVE-2024-44043WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerabilityPhoto Gallery by 10Web
- CVE-2024-44045WordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerabilityKevon Adonis WP Abstracts
- CVE-2024-45247Sonarr – CWE-601: URL Redirection to Untrusted Site ('Open Redirect')Sonarr
- CVE-2024-44046WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilitythemifyme Themify – WooCommerce Product Filter
- CVE-2024-47298WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerabilityboldthemes Bold Page Builder
- CVE-2024-47299WordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerabilityComing Soon Page, Under Construction & Maintenance Mode by…
- CVE-2024-47307WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityEssential Plugin Meta slider and carousel with lightbox
- CVE-2024-9554Sovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorizationSovell Smart Canteen System
- CVE-2024-47310WordPress ARI Fancy Lightbox -- Popup for WordPress plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerabilityarisoft ARI Fancy Lightbox
- CVE-2024-47313WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerabilitycatchthemes Catch Base
- CVE-2024-47329WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerabilityquomodosoft ElementsReady Addons for Elementor
- CVE-2024-47332WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerabilitywowDevs Sky Addons for Elementor
- CVE-2024-47336WordPress Terms Descriptions plugin <= 3.4.7 - Cross Site Scripting (XSS) vulnerabilityVladimir Statsenko Terms descriptions
- CVE-2024-47340WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
- CVE-2024-47342WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Accordion
- CVE-2024-47343WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityKraft Plugins Mega Elements
- CVE-2024-47345WordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Starter Templates
- CVE-2024-47355WordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerabilityCozyThemes Cozy Blocks
- CVE-2024-47356WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerabilitycatchthemes Create
- CVE-2024-47357WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerabilityHappyMonster Happy Addons for Elementor
- CVE-2024-47363WordPress Blockspare plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerabilityBlockspare
- CVE-2024-47364WordPress Move Addons for Elementor plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilitymoveaddons Move Addons for Elementor
- CVE-2024-47365WordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerabilityAtakan Au Automatically Hierarchic Categories in Menu
- CVE-2024-47366WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerabilityWPVibes Elementor Addon Elements
- CVE-2024-47368WordPress Premium Blocks plugin <= 2.1.33 - Cross Site Scripting (XSS) vulnerabilityLeap13 Premium Blocks – Gutenberg Blocks for WordPress