CVEs published December 1, 2024
12 CVEs were published on December 1, 2024: 0 critical, 3 high.
- Published
- 12
- Critical
- 0
- High
- 3
- Medium
- 9
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Aezaz Shaikh Countdown Timer for Elementor
- 1
- Berg Informatik Stripe Donation
- 1
- code-projects Farmacia
- 1
- FlickDevs Elementor Button Plus
- 1
- Maeve Lander PayPal Responder
- 1
- nutttaro Video Player for WPBakery
- 1
- Plugin Devs Post Carousel Slider for Elementor
- 1
- Prism I.T. Systems Multilevel Referral Affiliate Plugin for…
- 1
- SkyBootstrap Elementor Image Gallery Plugin
- 1
- Terry L. WP Mermaid
- 1
High 3
- CVE-2024-53742WordPress Multilevel Referral Affiliate plugin for WooCommerce plugin <= 2.27 - Reflected Cross Site Scripting (XSS) vulnerabilityPrism I.T. Systems Multilevel Referral Affiliate Plugin for…
- CVE-2024-53750WordPress PayPal Responder plugin <= 1.2 - CSRF to Stored XSS vulnerabilityMaeve Lander PayPal Responder
- CVE-2024-45520WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE
Medium, low and unrated 9
- CVE-2024-12007code-projects Farmacia visualizar-produto.php sql injectioncode-projects Farmacia
- CVE-2024-53743WordPress Countdown Timer for Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerabilityAezaz Shaikh Countdown Timer for Elementor
- CVE-2024-53744WordPress Elementor Image Gallery plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilitySkyBootstrap Elementor Image Gallery Plugin
- CVE-2024-53745WordPress Social Sharing Buttons By Cosmos Farm plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability코스모스팜 – Cosmosfarm 소셜 공유 버튼 By 코스모스팜
- CVE-2024-53746WordPress Elementor Button Plus plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerabilityFlickDevs Elementor Button Plus
- CVE-2024-53747WordPress Video Player for WPBakery plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitynutttaro Video Player for WPBakery
- CVE-2024-53748WordPress WP Mermaid plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilityTerry L. WP Mermaid
- CVE-2024-53749WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityPlugin Devs Post Carousel Slider for Elementor
- CVE-2024-53752WordPress Stripe Donation plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityBerg Informatik Stripe Donation