CVEs published December 7, 2024
32 CVEs were published on December 7, 2024: 0 critical, 6 high.
- Published
- 32
- Critical
- 0
- High
- 6
- Medium
- 26
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- cmorillas1 Shortcodes Blocks Creator Ultimate
- 2
- IBM Db2 for Linux, UNIX and Windows
- 2
- nshowketgmailcom Simple Ecommerce Shopping Cart Plugin- Sel…
- 2
- alphabposervice Easy Code Snippets
- 1
- andreiigna If Menu – Visibility control for Menus
- 1
- ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image P…
- 1
- CardGate Payments for WooCommerce
- 1
- clicksend SMS for Lead Capture Forms
- 1
- codemstory 워드프레스 결제 심플페이 – 우커머스 결제 플러그인
- 1
- codemstory 코드엠샵 소셜톡
- 1
High 6
- CVE-2024-47115IBM AIX command executionIBM AIX
- CVE-2024-11501Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injectionwebdzier Gallery
- CVE-2024-11010FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusionsoftaculous FileOrganizer – WordPress File Manager
- CVE-2024-12270Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injectionjonathandejong Beautiful taxonomy filters
- CVE-2024-53143fsnotify: Fix ordering of iput() and watched_objects decrementLinux
- CVE-2024-53473WeGIA 3.2.0 before 3998672 does not verify permission to change a password.
Medium, low and unrated 26
- CVE-2024-47107IBM QRadar SIEM cross-site scriptingIBM QRadar SIEM
- CVE-2024-41762IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-37071IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-11457Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scriptingspartac Feedpress Generator – External RSS Frontend Customi…
- CVE-2024-11380Mini Program API <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingimahui Mini Program API
- CVE-2024-11464Easy Code Snippets <= 1.0.2 - Reflected Cross-Site Scriptingalphabposervice Easy Code Snippets
- CVE-2024-12128Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameternshowketgmailcom Simple Ecommerce Shopping Cart Plugin- Sel…
- CVE-2024-11367Smoove connector for Elementor forms <= 4.1.0 - Reflected Cross-Site Scriptingmatansmoove Smoove connector for Elementor forms
- CVE-2024-11374TWChat – Send or receive messages from users <= 4.0.4 - Reflected Cross-Site Scriptingrezaplus TWChat – Send or receive messages from users
- CVE-2024-12253Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Accessnshowketgmailcom Simple Ecommerce Shopping Cart Plugin- Sel…
- CVE-2024-11183Simple Side Tab < 2.2.0 - Admin+ Stored XSSSimple Side Tab
- CVE-2024-7894If Menu <= 0.19.1 - Missing Authorization to License Key Updateandreiigna If Menu – Visibility control for Menus
- CVE-2024-8679Library Management System <= 3.1 - Authenticated (Admin+) SQL Injectionowthub Library Management System
- CVE-2024-12115Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplicationays-pro Poll Maker – Versus Polls, Anonymous Polls, Image P…
- CVE-2024-12167Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via _wpnoncecmorillas1 Shortcodes Blocks Creator Ultimate
- CVE-2024-12165Mollie for Contact Form 7 <= 5.0.0 - Reflected Cross-Site Scriptingtsjippy Mollie for Contact Form
- CVE-2024-11353SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletionclicksend SMS for Lead Capture Forms
- CVE-2024-12257CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site ScriptingCardGate Payments for WooCommerce
- CVE-2024-11904코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingcodemstory 코드엠샵 소셜톡
- CVE-2024-12026Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creationkofimokome Message Filter for Contact Form
- CVE-2024-12166Shortcodes Blocks Creator Ultimate <= 2.2.0 - Reflected Cross-Site Scripting via 'page'cmorillas1 Shortcodes Blocks Creator Ultimate
- CVE-2024-11451Zooom <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingharshitpeer Zooom
- CVE-2024-11943워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.2.2 - Reflected Cross-Site Scripting via add_query_arg Functioncodemstory 워드프레스 결제 심플페이 – 우커머스 결제 플러그인
- CVE-2024-10046افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.0.5 - Reflected Cross-Site Scriptingpersianscript افزونه پیامک ووکامرس Persian WooCommerce SMS
- CVE-2024-11436Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scriptinggenetechproducts Pie Forms — Drag & Drop Form Builder
- CVE-2024-11329Comfino Payment Gateway <= 4.1.1 - Reflected Cross-Site ScriptingComfino Payment Gateway