CVEs published November 2, 2024
12 CVEs were published on November 2, 2024: 0 critical, 2 high.
- Published
- 12
- Critical
- 0
- High
- 2
- Medium
- 10
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- bdthemes Element Pack – Widgets, Templates & Addons for Ele…
- 2
- Tenda AC6
- 2
- code-projects Simple Car Rental System
- 1
- code-projects University Event Management System
- 1
- code-projects Wazifa System
- 1
- PHPGurukul Car Rental Portal
- 1
- reputeinfosystems Appointment Booking Calendar Plugin and S…
- 1
- spiderdevs Forumax – AI Powered Advanced Community Forum Pl…
- 1
- wedevs ReCaptcha Integration for WordPress
- 1
High 2
Medium, low and unrated 10
- CVE-2024-10702code-projects Simple Car Rental System signup.php sql injectioncode-projects Simple Car Rental System
- CVE-2024-10701PHPGurukul Car Rental Portal search.php cross site scriptingPHPGurukul Car Rental Portal
- CVE-2024-10700code-projects University Event Management System submit.php sql injectioncode-projects University Event Management System
- CVE-2024-10699code-projects Wazifa System logincontrol.php sql injectioncode-projects Wazifa System
- CVE-2024-10697Tenda AC6 API Endpoint WriteFacMac formWriteFacMac command injectionTenda AC6
- CVE-2024-9896BBP Core – Expand bbPress powered forums with useful features <= 1.2.5 - Reflected Cross-Site Scripting via add_query_arg Parameterspiderdevs Forumax – AI Powered Advanced Community Forum Pl…
- CVE-2024-9868Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gatebdthemes Element Pack – Widgets, Templates & Addons for Ele…
- CVE-2024-8739ReCaptcha Integration for WordPress <= 1.2.5 - Reflected Cross-Site Scriptingwedevs ReCaptcha Integration for WordPress
- CVE-2024-10540Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injectionreputeinfosystems Appointment Booking Calendar Plugin and S…
- CVE-2024-10310Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widgetbdthemes Element Pack – Widgets, Templates & Addons for Ele…