# CVEs published 2024-11-30

29 CVEs were published on November 30, 2024: 0 critical, 5 high. Days are UTC.

- [CVE-2024-53756](https://cve.now/CVE-2024-53756.md): WordPress Vertical Carousel plugin \<= 1.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Aftab Husain Vertical Carousel)
- [CVE-2024-53757](https://cve.now/CVE-2024-53757.md): WordPress WP Find Your Nearest plugin \<= 0.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, SocialEvolution WP Find Your Nearest)
- [CVE-2024-53758](https://cve.now/CVE-2024-53758.md): WordPress WP MathJax plugin \<= 1.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Terry L. WP MathJax)
- [CVE-2024-53760](https://cve.now/CVE-2024-53760.md): WordPress Capitalize My Title WordPress plugin \<= 0.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Capitalize My Title)
- [CVE-2024-53763](https://cve.now/CVE-2024-53763.md): WordPress Best Addons for Elementor plugin \<=1.0.5 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Rejuan Ahamed Best Addons for Elementor)
- [CVE-2024-53764](https://cve.now/CVE-2024-53764.md): WordPress Softtemplates For Elementor plugin \<= 1.0.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, SoftHopper Softtemplates For Elementor)
- [CVE-2024-53766](https://cve.now/CVE-2024-53766.md): WordPress Devnex Addons For Elementor plugin \<= 1.0.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Devnex Addons For Elementor)
- [CVE-2024-53767](https://cve.now/CVE-2024-53767.md): WordPress Pixobe Cartography plugin \<= 1.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Pixobe Cartography)
- [CVE-2024-53771](https://cve.now/CVE-2024-53771.md): WordPress SimpleSchema plugin \<= 1.7.6.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, sergiomico SimpleSchema)
- [CVE-2024-53772](https://cve.now/CVE-2024-53772.md): WordPress Mail Picker plugin \<= 1.0.15 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, PickPlugins Mail Picker)
- [CVE-2024-53773](https://cve.now/CVE-2024-53773.md): WordPress Znajdź Pracę z Praca.pl plugin \<= 2.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, pracapl Znajdź Pracę z Praca.pl)
- [CVE-2024-53774](https://cve.now/CVE-2024-53774.md): WordPress Sparkle Elementor Kit plugin \<= 2.0.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Jakub Glos Sparkle Elementor Kit)
- [CVE-2024-53778](https://cve.now/CVE-2024-53778.md): WordPress Essential Breadcrumbs plugin \<= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Essential Marketer Essential Breadcrumbs)
- [CVE-2024-53786](https://cve.now/CVE-2024-53786.md): WordPress Cowidgets – Elementor Addons plugin \<= 1.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Codeless Cowidgets – Elementor Addons)
- [CVE-2024-53787](https://cve.now/CVE-2024-53787.md): WordPress Random Banner plugin \<= 4.2.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, M A Vinoth Kumar Random Banner)
- [CVE-2024-53788](https://cve.now/CVE-2024-53788.md): WordPress WordPress Portfolio Builder – Portfolio Gallery plugin \<= 1.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, portfoliohub WordPress Portfolio Builder – Portfolio Gallery)
- [CVE-2024-53783](https://cve.now/CVE-2024-53783.md): WordPress Ni WooCommerce Cost Of Goods plugin \<= 3.2.8 - SQL Injection vulnerability (CVSS 7.6, Anzar Ahmed Ni WooCommerce Cost Of Goods)
- [CVE-2024-53768](https://cve.now/CVE-2024-53768.md): WordPress Content Audit Exporter plugin \<= 1.1 - Sensitive Data Exposure vulnerability (CVSS 5.3, ideinteractive Content Audit Exporter)
- [CVE-2024-53739](https://cve.now/CVE-2024-53739.md): WordPress Cryptocurrency Widgets For Elementor plugin \<= 1.6.4 - Local File Inclusion vulnerability (CVSS 8.1, Cool Plugins Cryptocurrency Widgets For Elementor)
- [CVE-2024-53738](https://cve.now/CVE-2024-53738.md): WordPress Asset CleanUp: Page Speed Booster plugin \<=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4, Gabe Livan Asset CleanUp: Page Speed Booster)
- [CVE-2024-12002](https://cve.now/CVE-2024-12002.md): Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference (CVSS 5.3, Tenda FH451 · Tenda FH1201 +2)
- [CVE-2024-12001](https://cve.now/CVE-2024-12001.md): code-projects Wazifa System Setting updatesettings.php cross site scripting (CVSS 5.3, code-projects Wazifa System)
- [CVE-2024-12000](https://cve.now/CVE-2024-12000.md): code-projects Blood Bank System Setting updatesettings.php cross site scripting (CVSS 5.3, code-projects Blood Bank System)
- [CVE-2024-11998](https://cve.now/CVE-2024-11998.md): code-projects Farmacia visualizer-forneccedor.chp sql injection (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-11997](https://cve.now/CVE-2024-11997.md): code-projects Farmacia vendas.php cross site scripting (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-11996](https://cve.now/CVE-2024-11996.md): code-projects Farmacia editar-fornecedor.php cross site scripting (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-11252](https://cve.now/CVE-2024-11252.md): Social Sharing Plugin – Sassy Social Share \<= 3.3.69 - Reflected Cross-Site Scripting via heateor\_mastodon\_share Parameter (CVSS 6.1, heateor Social Sharing Plugin – Sassy Social Share)
- [CVE-2024-43703](https://cve.now/CVE-2024-43703.md): GPU DDK - Duplicate calls to RGXCreateFreeList on the same reservation leads to GPU UAF (CVSS 8.1, Imagination Technologies Graphics DDK)
- [CVE-2024-43702](https://cve.now/CVE-2024-43702.md): GPU DDK - MLIST/PM render state buffers writable allowing arbitrary writes to kernel memory pages (CVSS 8.1, Imagination Technologies Graphics DDK)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-11-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.