# CVEs published 2024-12-01

12 CVEs were published on December 1, 2024: 0 critical, 3 high. Days are UTC.

- [CVE-2024-12007](https://cve.now/CVE-2024-12007.md): code-projects Farmacia visualizar-produto.php sql injection (CVSS 5.3, code-projects Farmacia)
- [CVE-2024-53742](https://cve.now/CVE-2024-53742.md): WordPress Multilevel Referral Affiliate plugin for WooCommerce plugin \<= 2.27 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Prism I.T. Systems Multilevel Referral Affiliate Plugin for…)
- [CVE-2024-53743](https://cve.now/CVE-2024-53743.md): WordPress Countdown Timer for Elementor plugin \<= 1.3.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Aezaz Shaikh Countdown Timer for Elementor)
- [CVE-2024-53744](https://cve.now/CVE-2024-53744.md): WordPress Elementor Image Gallery plugin \<= 1.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, SkyBootstrap Elementor Image Gallery Plugin)
- [CVE-2024-53745](https://cve.now/CVE-2024-53745.md): WordPress Social Sharing Buttons By Cosmos Farm plugin \<= 1.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, 코스모스팜 – Cosmosfarm 소셜 공유 버튼 By 코스모스팜)
- [CVE-2024-53746](https://cve.now/CVE-2024-53746.md): WordPress Elementor Button Plus plugin \<= 1.3.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, FlickDevs Elementor Button Plus)
- [CVE-2024-53747](https://cve.now/CVE-2024-53747.md): WordPress Video Player for WPBakery plugin \<= 1.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, nutttaro Video Player for WPBakery)
- [CVE-2024-53748](https://cve.now/CVE-2024-53748.md): WordPress WP Mermaid plugin \<= 1.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Terry L. WP Mermaid)
- [CVE-2024-53749](https://cve.now/CVE-2024-53749.md): WordPress Post Carousel Slider for Elementor plugin \<= 1.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Plugin Devs Post Carousel Slider for Elementor)
- [CVE-2024-53750](https://cve.now/CVE-2024-53750.md): WordPress PayPal Responder plugin \<= 1.2 - CSRF to Stored XSS vulnerability (CVSS 7.1, Maeve Lander PayPal Responder)
- [CVE-2024-53752](https://cve.now/CVE-2024-53752.md): WordPress Stripe Donation plugin \<= 1.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Berg Informatik Stripe Donation)
- [CVE-2024-45520](https://cve.now/CVE-2024-45520.md): WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-12-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.