CVEs published November 1, 2024
235 CVEs were published on November 1, 2024: 2 critical, 39 high.
- Published
- 235
- Critical
- 2
- High
- 39
- Medium
- 193
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- Tongda OA
- 9
- ESAFENET CDG
- 6
- Apple iOS and iPadOS · Apple macOS +3
- 3
- CHANGING Information Technology IDExpert
- 3
- RadiusTheme The Post Grid
- 3
- sunshinephotocart Sunshine Photo Cart
- 3
- Arraytics Timetics
- 2
- Automattic Newspack Blocks
- 2
- Charitable Donations & Fundraising Team Charitable
- 2
- code-projects Courier Management System
- 2
Critical 2
High 39
- CVE-2024-9191The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables aOkta Verify for Windows
- CVE-2024-51492Zusam vulnerable to stored XSS, allowing token theft via crafted SVGzusam
- CVE-2024-49770oak's path traversal allows transfer of hidden files within the served root directoryoakserver oak · @oakserver/oak
- CVE-2024-10662Tenda AC15 SetOnlineDevName formSetDeviceName stack-based overflowTenda AC15
- CVE-2024-10661Tenda AC15 SetDlnaCfg stack-based overflowTenda AC15
- CVE-2024-47314WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2024-37106WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerabilityWishList Products WishList Member X
- CVE-2024-37108WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerabilityWishList Products WishList Member X
- CVE-2024-37232WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerabilityHercules Design Hercules Core
- CVE-2024-37277WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerabilityPaid Memberships Pro
- CVE-2024-37423WordPress Newspack Blocks plugin <= 3.0.8 - Contributor+ Arbitrary Directory Deletion vulnerabilityAutomattic Newspack Blocks
- CVE-2024-37470WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerabilityWofficeIO Woffice Core
- CVE-2024-38721WordPress EazyDocs plugin <= 2.5.0 - Broken Access Control vulnerabilityspider-themes EazyDocs
- CVE-2024-38726WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerabilityPickPlugins Product Designer
- CVE-2024-38744WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerabilityUpqode Plum: Spin Wheel & Email Pop-up
- CVE-2024-39650WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple VulnerabilitiesWPWeb Elite WooCommerce PDF Vouchers
- CVE-2024-39664WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerabilityYMC Filter & Grids
- CVE-2024-43158WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerabilityMasteriyo - LMS
- CVE-2024-43212WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerabilityMagePeople Team WpTravelly
- CVE-2024-43235WordPress Meta Box plugin <= 5.9.10 - Broken Access Control vulnerabilityMetaBox.io Meta Box – WordPress Custom Fields Framework
- CVE-2024-43982WordPress Login As Users plugin <= 1.4.3 - Broken Access Control to Account Takeover vulnerabilityGeek Code Lab Login As Users
- CVE-2024-37094WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS
- CVE-2024-10653CHANGING Information Technology IDExpert - OS Command InjectionCHANGING Information Technology IDExpert
- CVE-2024-0106NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper NVIDIA BlueField
- CVE-2024-0105NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue.NVIDIA ConnectX4 · NVIDIA ConnectX GA +3
- CVE-2024-47939Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor.Ricoh Company Multiple laser printers and MFPs which implem…
- CVE-2024-27524Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the file
- CVE-2024-40490An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Pass
- CVE-2024-48217An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation.
- CVE-2024-48270An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack.
- CVE-2024-48352Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enter
- CVE-2024-48353Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and decrypt the plaintex
- CVE-2024-51244In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the do
- CVE-2024-51245In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the re
- CVE-2024-51247In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the do
- CVE-2024-51248In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the mo
- CVE-2024-51252In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the re
- CVE-2024-51377An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) 9.2.0 allows a remote attacker to execute arbitrary co
- CVE-2024-51431LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.
Medium, low and unrated 194
- CVE-2024-44233The issue was addressed with improved bounds checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-44232The issue was addressed with improved bounds checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-44234The issue was addressed with improved bounds checks.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-41744IBM CICS TX Standard cross-site request forgeryIBM CICS TX Standard
- CVE-2024-41745IBM CICS TX Standard cross-site scriptingIBM CICS TX Standard
- CVE-2024-41741IBM TXSeries for Multiplatforms information disclosureIBM TXSeries for Multiplatforms
- CVE-2024-41738IBM TXSeries for Multiplatforms information disclosureIBM TXSeries for Multiplatforms
- CVE-2024-51483changedetection.io Path Traversal vulnerabilitydgtlmoon changedetection.io · changedetection-io
- CVE-2024-10660ESAFENET CDG HookService.java deleteHook sql injectionESAFENET CDG
- CVE-2024-10659ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injectionESAFENET CDG
- CVE-2024-10658Tongda OA check_seal.php sql injectionTongda OA
- CVE-2024-10657Tongda OA prcs_info.php sql injectionTongda OA
- CVE-2024-10656Tongda OA 2017 apply.php sql injectionTongda OA
- CVE-2024-37209WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerabilityPrism IT Systems User Rights Access Manager
- CVE-2024-49256WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerabilityWP Chill Htaccess File Editor
- CVE-2024-48045WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerabilityHappyMonster Happy Addons for Elementor
- CVE-2024-48044WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - Broken Access Control vulnerabilityShortPixel Image Optimizer
- CVE-2024-48039WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerabilityImran Tauqeer CubeWP
- CVE-2024-47311WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerabilityKraft Plugins Wheel of Life
- CVE-2024-47302WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerabilityShahjahan Jewel Fluent Support
- CVE-2024-44038WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2024-37250WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerabilityWPEngine Advanced Custom Fields PRO
- CVE-2024-37249WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerabilityWPEngine Advanced Custom Fields PRO
- CVE-2024-37095WordPress Envira Photo Gallery plugin <= 1.8.7.3 - CSRF leading to notice dismissal vulnerabilityEnvira Gallery Team Envira Photo Gallery
- CVE-2024-37096WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerabilityPopup Box Team Popup box
- CVE-2024-37119WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerabilityUncanny Owl Uncanny Automator Pro
- CVE-2024-37123WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerabilityVowelWeb Ibtana
- CVE-2024-37201WordPress Woocommerce Customers Order History plugin <= 5.2.2 - Broken Access Control vulnerabilityjavmah Woocommerce Customers Order History
- CVE-2024-37203WordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerabilityLaybuy Payment Extension for WooCommerce
- CVE-2024-37204WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerabilityPropertyHive
- CVE-2024-37207WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerabilityTheme4Press Demo Awesome
- CVE-2024-37214WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerabilityDropshipping Guru Ali2Woo Lite
- CVE-2024-37218WordPress Page Builder Sandwich <= 5.1.0 - Broken Access Control vulnerabilityWordPress Page Builder Sandwich Team Page Builder Sandwich…
- CVE-2024-37220WordPress Optinly plugin <= 1.0.18 - Broken Access Control vulnerabilityOptinlyHQ Optinly
- CVE-2024-37226WordPress Kanban Boards for WordPress plugin <= 2.5.21 - Broken Access Control vulnerabilityKanban for WordPress Kanban Boards for WordPress
- CVE-2024-37254WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerabilitymndpsingh287 File Manager
- CVE-2024-37255WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerabilityRoxnor ElementsKit Elementor addons Lite
- CVE-2024-37269WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilityStylemixThemes Masterstudy Elementor Widgets
- CVE-2024-37276WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerabilityfifu.app Featured Image from URL
- CVE-2024-37411WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerabilityProgress Planner
- CVE-2024-37415WordPress E2Pdf plugin <= 1.20.27 - Broken Access Control vulnerabilitye2pdf
- CVE-2024-37425WordPress Newspack Blocks plugin <= 3.0.8 - Broken Access Control vulnerabilityAutomattic Newspack Blocks
- CVE-2024-37427WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerabilityArraytics Timetics
- CVE-2024-37439WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerabilityUncanny Owl Uncanny Toolkit Pro for LearnDash
- CVE-2024-37440WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerabilityandy_moyle Church Admin
- CVE-2024-37443WordPress WP Job Manager plugin <= 2.1.0 - Broken Access Control vulnerabilityAutomattic WP Job Manager - Resume Manager
- CVE-2024-37444WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerabilityWPMU DEV - Your All-in-One WordPress Platform Defender Secu…
- CVE-2024-37453WordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerabilityProfileGrid User Profiles ProfileGrid
- CVE-2024-37456WordPress Simple Newsletter Plugin – Noptin plugin <= 3.4.2 - Broken Access Control vulnerabilityNoptin Newsletter Noptin
- CVE-2024-37463WordPress CRM Perks Forms plugin <= 1.1.5 - Broken Access Control vulnerabilityCRM Perks Forms
- CVE-2024-37468WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerabilityblazethemes Newsmatic
- CVE-2024-37475WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerabilityAutomattic Newspack Newsletters
- CVE-2024-37477WordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerabilityAutomattic Newspack Content Converter
- CVE-2024-37481WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerabilityRadiusTheme The Post Grid
- CVE-2024-37482WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerabilityRadiusTheme The Post Grid
- CVE-2024-37483WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerabilityRadiusTheme The Post Grid
- CVE-2024-37505WordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerabilityRara Themes Business One Page
- CVE-2024-37506WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerabilityCharitable Donations & Fundraising Team Charitable
- CVE-2024-37510WordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerabilityCharitable Donations & Fundraising Team Charitable
- CVE-2024-37516WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerabilityfifu.app Featured Image from URL
- CVE-2024-37517WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerabilityBrainstorm Force Spectra
- CVE-2024-37921WordPress Chained Quiz plugin <= 1.3.2.8 - Broken Access Control vulnerabilityKiboko Labs Chained Quiz
- CVE-2024-37926WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerabilityAlex Volkov WP Accessibility Helper
- CVE-2024-37929WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerabilitysolwin User Activity Log Pro
- CVE-2024-38690WordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerabilityAvirtum iPanorama 360 WordPress Virtual Tour Builder
- CVE-2024-38695WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerabilityMartin Gibson WP GoToWebinar
- CVE-2024-38702WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerabilityTyche Softwares Product Delivery Date for WooCommerce – Lite
- CVE-2024-38707WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerabilityWPDeveloper EmbedPress
- CVE-2024-38714WordPress WP Fast Total Search <= 1.68.232 - Broken Access Control vulnerabilityEpsiloncool WP Fast Total Search
- CVE-2024-38719WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerabilityCreative Motion Auto Featured Image
- CVE-2024-38727WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerabilitySeraphinite Solutions Seraphinite Post .DOCX Source
- CVE-2024-38733WordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerabilityMeks Video Importer
- CVE-2024-38737WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerabilityReservation Diary ReDi Restaurant Reservation
- CVE-2024-38740WordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerabilityPacklink Shipping S.L. Packlink PRO shipping module
- CVE-2024-38743WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerabilityUpqode Plum: Spin Wheel & Email Pop-up
- CVE-2024-38745WordPress Wholesale Suite plugin <= 2.1.12 - Broken Access Control vulnerabilityRymera Web Wholesale Suite
- CVE-2024-38748WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerabilityTheInnovs EleForms
- CVE-2024-38769WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerabilityTyche Softwares Arconix Shortcodes
- CVE-2024-38771WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerabilityVito Peleg Atarim
- CVE-2024-38774WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerabilitySiteGround Security
- CVE-2024-38777WordPress Titan Anti-spam & Security plugin <= 7.3.6 - Broken Access Control vulnerabilityCreativeMotion Titan Anti-spam & Security
- CVE-2024-38783WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerabilityTyche Softwares Arconix FAQ
- CVE-2024-38792WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerabilityConveyThis Translate Team Language Translate Widget for Wor…
- CVE-2024-38794WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerabilityMediaRon Custom Query Blocks
- CVE-2024-39625WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication VulnerabilityIcegram
- CVE-2024-39635WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerabilityKaineLabs Youzify
- CVE-2024-39639WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerabilityNickolas Bossinas WordPress File Upload
- CVE-2024-39640WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerabilityQuadLayers WP Social Feed Gallery
- CVE-2024-39654WordPress Sign-up Sheets plugin <= 2.2.12 - Broken Access Control vulnerabilityFetch Designs Sign-up Sheets
- CVE-2024-43118WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerabilityWPMU DEV - Your All-in-One WordPress Platform Hummingbird
- CVE-2024-43119WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerabilityAruba.it Aruba HiSpeed Cache
- CVE-2024-43120WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerabilityXSERVER TypeSquare Webfonts
- CVE-2024-43122WordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerabilityCreative Motion Robin image optimizer
- CVE-2024-43134WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerabilityxootix Waitlist Woocommerce
- CVE-2024-43136WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2024-43142WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerabilityThemeum Tutor LMS
- CVE-2024-43143WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerabilityRoundup WP Registrations for the Events Calendar
- CVE-2024-43146WordPress Accelerated Mobile Pages plugin <= 1.0.96.1 - Broken Access Control vulnerabilityAhmed Kaludi, Mohammed Kaludi AMP for WP
- CVE-2024-43154WordPress Advanced Cron Manager – debug & control plugin <= 2.5.9 - Broken Access Control vulnerabilityBracketSpace Advanced Cron Manager – debug & control
- CVE-2024-43157WordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerabilitynCrafts FormCraft
- CVE-2024-43159WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerabilityMasteriyo - LMS
- CVE-2024-43162WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerabilityEasy Digital Downloads
- CVE-2024-43208WordPress Send Emails with Mandrill plugin <= 1.4.1 - Broken Access Control vulnerabilityMatt Miller Send Emails with Mandrill
- CVE-2024-43209WordPress Bitly's WordPress Plugin plugin <= 2.7.2 - Broken Access Control vulnerabilityBitly
- CVE-2024-43211WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerabilityPluginOps MailChimp Subscribe Forms
- CVE-2024-43215WordPress Social Slider Feed plugin <= 2.2.2 - Broken Access Control vulnerabilitycreativemotion Social Slider Feed
- CVE-2024-43219WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerabilityووکامرس فارسی Persian WooCommerce
- CVE-2024-43223WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerabilityEventPrime Events EventPrime
- CVE-2024-43229WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerabilityCornel Raiu WP Search Analytics
- CVE-2024-43253WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerabilityZAYTECH Smart Online Order for Clover
- CVE-2024-43254WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerabilityZAYTECH Smart Online Order for Clover
- CVE-2024-43260WordPress Clearfy Cache plugin <= 2.2.4 - Broken Access Control vulnerabilityCreative Motion Clearfy Cache
- CVE-2024-43268WordPress Backup and Restore WordPress plugin <= 1.50 - Broken Access Control vulnerabilityWPBackItUp Backup and Restore WordPress
- CVE-2024-43270WordPress Backup and Restore WordPress plugin <= 1.50 - Unauthenticated Broken Access Control vulnerabilityWPBackItUp Backup and Restore WordPress
- CVE-2024-43273WordPress Icegram Collect plugin <= 1.3.14 - Broken Access Control vulnerabilityIcegram Collect
- CVE-2024-43274WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerabilityJS Help Desk – Best Help Desk & Support Plugin
- CVE-2024-43277WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerabilityAyeCode UsersWP
- CVE-2024-43285WordPress Presto Player plugin <= 3.0.2 - Broken Access Control vulnerabilityPresto Made Presto Player
- CVE-2024-43290WordPress Atarim plugin <= 4.0.1 - Broken Access Control vulnerabilityVito Peleg Atarim
- CVE-2024-43293WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerabilityWPZOOM Recipe Card Blocks for Gutenberg & Elementor
- CVE-2024-43296WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerabilitybPlugins Flash & HTML5 Video
- CVE-2024-43297WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerabilityMigrate Clone
- CVE-2024-43298WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerabilityMigrate Clone
- CVE-2024-43302WordPress Fonts plugin <= 3.7.7 - Broken Access Control vulnerabilityFonts Plugin Fonts
- CVE-2024-43310WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerabilityUkrSolution Print Barcode Labels for your WooCommerce produ…
- CVE-2024-43312WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerabilityWPClever WPC Frequently Bought Together for WooCommerce
- CVE-2024-43314WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerabilityGabe Livan Asset CleanUp: Page Speed Booster
- CVE-2024-43323WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerabilityReviewX
- CVE-2024-43332WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerabilityJordy Meow Photo Engine
- CVE-2024-43341WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerabilityCozyThemes Hello Agency
- CVE-2024-43343WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerabilityEtoile Web Design Order Tracking
- CVE-2024-43355WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerabilityBearDev JoomSport
- CVE-2024-43919WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerabilityYARPP
- CVE-2024-43923WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerabilityArraytics Timetics
- CVE-2024-43925WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerabilityEnvira Gallery Team Envira Photo Gallery
- CVE-2024-43928WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerabilityeyecix JobSearch
- CVE-2024-43929WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerabilityeyecix JobSearch
- CVE-2024-43932WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerabilityPOSIMYTH The Plus Addons for Elementor Page Builder Lite
- CVE-2024-43937WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerabilityThemeum WP Crowdfunding
- CVE-2024-43956WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerabilityCaseproof Memberpress
- CVE-2024-43962WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerabilityLWS Affiliation
- CVE-2024-43968WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerabilityAutomattic Newspack
- CVE-2024-43973WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerabilityStiofan GetPaid
- CVE-2024-43974WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerabilityCozyThemes ReviveNews
- CVE-2024-43979WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerabilityCozyThemes Blockbooster
- CVE-2024-43980WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerabilityCozyThemes Fota WP
- CVE-2024-43981WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerabilityAyeCode – WP Business Directory Plugins GeoDirectory
- CVE-2024-43998WordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerabilityWebsiteinWP Blogpoet
- CVE-2024-44006WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerabilityAmir Helzer WooCommerce Multilingual & Multicurrency
- CVE-2024-44019WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerabilityRenzo Johnson Contact Form 7 Campaign Monitor Extension
- CVE-2024-44020WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerabilityprasadkirpekar WP Free SSL – Free SSL Certificate for WordP…
- CVE-2024-44021WordPress Truepush plugin <= 1.0.8 - Broken Access Control vulnerabilitytruepushplugin Truepush
- CVE-2024-44031WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerabilitybeardev JoomSport
- CVE-2024-44052WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerabilityHelloAsso
- CVE-2024-47308WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerabilityWPDeveloper Templately
- CVE-2024-47317WordPress Ads by WPQuads plugin <= 2.0.84 - Broken Access Control vulnerabilityAds by WPQuads
- CVE-2024-47318WordPress PWA for WP & AMP plugin <= 1.7.72 - Broken Access Control vulnerabilityMagazine3 PWA for WP & AMP
- CVE-2024-47321WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerabilityFahad Mahmood WP Datepicker
- CVE-2024-47358WordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerabilityDaniel Iser Popup Maker
- CVE-2024-47359WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerabilityaverta Depicter Slider
- CVE-2024-47361WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerabilityWPVibes Elementor Addon Elements
- CVE-2024-47362WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerabilityWP Chill Strong Testimonials
- CVE-2024-10655Tongda OA 2017 new.php sql injectionTongda OA
- CVE-2024-10654TOTOLINK LR350 formLoginAuth.htm authorizationTOTOLINK LR350
- CVE-2024-10367Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadthemeisle Otter Blocks – Gutenberg Blocks, Page Builder for…
- CVE-2024-10652CHANGING Information Technology IDExpert - Reflected XSSCHANGING Information Technology IDExpert
- CVE-2024-10651CHANGING Information Technology IDExpert - Arbitrary File Read through Path TraversalCHANGING Information Technology IDExpert
- CVE-2024-10232AtomChat <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atomchat ShortcodeGroup Chat & Video Chat by AtomChat
- CVE-2024-9655Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widgetstellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…
- CVE-2024-7424Multiple Page Generator Plugin – MPG <= 4.0.1 - Missing Authorizationthemeisle Multiple Page Generator Plugin – MPG
- CVE-2024-21510Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (Xsinatra
- CVE-2024-10620knightliao Disconf Configuration Center list improper authenticationknightliao Disconf
- CVE-2024-49501Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability.OMRON SYSMAC-SE2[][][]
- CVE-2024-10619Tongda OA 2017 next_detail.php sql injectionTongda OA
- CVE-2024-10618Tongda OA 2017 record_detail.php sql injectionTongda OA
- CVE-2024-10617Tongda OA check_seal.php sql injectionTongda OA
- CVE-2024-10616Tongda OA webSignSubmit.php sql injectionTongda OA
- CVE-2024-10615Tongda OA 2017 delete_data_attach.php sql injectionTongda OA
- CVE-2024-10613ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injectionESAFENET CDG
- CVE-2024-10612ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injectionESAFENET CDG
- CVE-2024-10611ESAFENET CDG PrintScreenListService.java delProtocol sql injectionESAFENET CDG
- CVE-2024-10610ESAFENET CDG ProtocolService.java delProtocol sql injectionESAFENET CDG
- CVE-2024-10609itsourcecode Tailoring Management System Project typeadd.php sql injectionitsourcecode Tailoring Management System Project
- CVE-2024-10608code-projects Courier Management System login.php sql injectioncode-projects Courier Management System
- CVE-2024-10607code-projects Courier Management System track-result.php sql injectioncode-projects Courier Management System
- CVE-2024-22733TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login
- CVE-2024-27525Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the file
- CVE-2024-48289An issue in the Bluetooth Low Energy implementation of Cypress Bluetooth SDK v3.66 allows attackers to cause a Denial of Service (DoS) via s
- CVE-2024-48410Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the login.php.
- CVE-2024-51398Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password leakage in the background may lead to unauthoriz
- CVE-2024-51399Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtai
- CVE-2024-51406Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be
- CVE-2024-51407Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host communic
- CVE-2024-51432Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI C