CVEs published November 30, 2024
29 CVEs were published on November 30, 2024: 0 critical, 5 high.
- Published
- 29
- Critical
- 0
- High
- 5
- Medium
- 24
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- code-projects Farmacia
- 3
- Imagination Technologies Graphics DDK
- 2
- Aftab Husain Vertical Carousel
- 1
- Anzar Ahmed Ni WooCommerce Cost Of Goods
- 1
- Capitalize My Title
- 1
- code-projects Blood Bank System
- 1
- code-projects Wazifa System
- 1
- Codeless Cowidgets – Elementor Addons
- 1
- Cool Plugins Cryptocurrency Widgets For Elementor
- 1
- Devnex Addons For Elementor
- 1
High 5
- CVE-2024-53778WordPress Essential Breadcrumbs plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityEssential Marketer Essential Breadcrumbs
- CVE-2024-53783WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerabilityAnzar Ahmed Ni WooCommerce Cost Of Goods
- CVE-2024-53739WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerabilityCool Plugins Cryptocurrency Widgets For Elementor
- CVE-2024-43703GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAFImagination Technologies Graphics DDK
- CVE-2024-43702GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pagesImagination Technologies Graphics DDK
Medium, low and unrated 24
- CVE-2024-53756WordPress Vertical Carousel plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilityAftab Husain Vertical Carousel
- CVE-2024-53757WordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerabilitySocialEvolution WP Find Your Nearest
- CVE-2024-53758WordPress WP MathJax plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityTerry L. WP MathJax
- CVE-2024-53760WordPress Capitalize My Title WordPress plugin <= 0.5.3 - Cross Site Scripting (XSS) vulnerabilityCapitalize My Title
- CVE-2024-53763WordPress Best Addons for Elementor plugin <=1.0.5 - Stored Cross Site Scripting (XSS) vulnerabilityRejuan Ahamed Best Addons for Elementor
- CVE-2024-53764WordPress Softtemplates For Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilitySoftHopper Softtemplates For Elementor
- CVE-2024-53766WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilityDevnex Addons For Elementor
- CVE-2024-53767WordPress Pixobe Cartography plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityPixobe Cartography
- CVE-2024-53771WordPress SimpleSchema plugin <= 1.7.6.9 - Cross Site Scripting (XSS) vulnerabilitysergiomico SimpleSchema
- CVE-2024-53772WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Mail Picker
- CVE-2024-53773WordPress Znajdź Pracę z Praca.pl plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerabilitypracapl Znajdź Pracę z Praca.pl
- CVE-2024-53774WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerabilityJakub Glos Sparkle Elementor Kit
- CVE-2024-53786WordPress Cowidgets – Elementor Addons plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityCodeless Cowidgets – Elementor Addons
- CVE-2024-53787WordPress Random Banner plugin <= 4.2.12 - Cross Site Scripting (XSS) vulnerabilityM A Vinoth Kumar Random Banner
- CVE-2024-53788WordPress WordPress Portfolio Builder – Portfolio Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerabilityportfoliohub WordPress Portfolio Builder – Portfolio Gallery
- CVE-2024-53768WordPress Content Audit Exporter plugin <= 1.1 - Sensitive Data Exposure vulnerabilityideinteractive Content Audit Exporter
- CVE-2024-53738WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerabilityGabe Livan Asset CleanUp: Page Speed Booster
- CVE-2024-12002Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereferenceTenda FH451 · Tenda FH1201 +2
- CVE-2024-12001code-projects Wazifa System Setting updatesettings.php cross site scriptingcode-projects Wazifa System
- CVE-2024-12000code-projects Blood Bank System Setting updatesettings.php cross site scriptingcode-projects Blood Bank System
- CVE-2024-11998code-projects Farmacia visualizer-forneccedor.chp sql injectioncode-projects Farmacia
- CVE-2024-11997code-projects Farmacia vendas.php cross site scriptingcode-projects Farmacia
- CVE-2024-11996code-projects Farmacia editar-fornecedor.php cross site scriptingcode-projects Farmacia
- CVE-2024-11252Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameterheateor Social Sharing Plugin – Sassy Social Share