CVEs published December 13, 2024
296 CVEs were published on December 13, 2024: 19 critical, 81 high. 1 is now in CISA KEV.
- Published
- 296
- Critical
- 19
- High
- 81
- Medium
- 192
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 29
Most affected products
- RTI Connext Professional
- 10
- Dell RecoverPoint for Virtual Machines
- 7
- PlexTrac
- 7
- Anzar Ahmed Ni CRM Lead
- 2
- Hive Support
- 2
- Horner Automation Cscape
- 2
- Imagination Technologies Graphics DDK
- 2
- JS Help Desk – Best Help Desk & Support Plugin
- 2
- themeum WP Crowdfunding
- 2
- Webcodin WCP Contact Form
- 2
Critical 19
- CVE-2024-54297WordPress vBSSO-lite plugin <= 1.4.3 - Account Takeover vulnerabilityextremeidea vBSSO-lite
- CVE-2024-54296WordPress CoSchool LMS plugin <= 1.4.3 - Account Takeover vulnerabilityCodexpert CoSchool LMS
- CVE-2024-54295WordPress ListApp Mobile Manager plugin <= 1.7.7 - Account Takeover vulnerabilityFluxBuilder ListApp Mobile Manager
- CVE-2024-54294WordPress Firebase OTP Authentication plugin <= 1.0.1 - Account Takeover vulnerabilityAppgenix Infotech Firebase OTP Authentication
- CVE-2024-54293WordPress CE21 Suite plugin <= 2.2.0 - Privilege Escalation vulnerabilityCE21 Suite
- CVE-2024-54292WordPress Appsplate plugin <= 2.1.3 - SQL Injection vulnerabilityAppsplate
- CVE-2024-54273WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerabilityPickPlugins Mail Picker
- CVE-2024-54262WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerabilitysidngr Import Export For WooCommerce
- CVE-2024-54261WordPress TAX SERVICE Electronic HDM plugin <= 1.2.2 - SQL Injection vulnerabilityHK Digital Agency TAX SERVICE Electronic HDM
- CVE-2024-54239WordPress Eyewear prescription form plugin <= 4.0.18 - Arbitrary Option Update to Privilege Escalation vulnerabilitydugudlabs Eyewear prescription form
- CVE-2024-54234WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerabilitywp-buy Limit Login Attempts
- CVE-2022-46838WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change VulnerabilityJS Help Desk – Best Help Desk & Support Plugin
- CVE-2024-11986Stored XSS in CrushFTPCrushFTP
- CVE-2024-21577ComfyUI-Ace-Nodes is vulnerable to Code Injection.hay86 ComfyUI-Ace-Nodes
- CVE-2024-21576ComfyUI-Bmad-Nodes is vulnerable to Code Injection.bmad4ever ComfyUI-Bmad-Nodes
- CVE-2024-52057Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration filesRTI Connext Professional
- CVE-2024-9290Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Uploadazzaroco Super Backup & Clone - Migrate for WordPress
- CVE-2024-12603A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.TECNO com.transsion.applock
- CVE-2024-55956In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbit
High 81
- CVE-2024-12552Wacom Center WTabletServicePro Link Following Local Privilege Escalation VulnerabilityWacom Center
- CVE-2024-55946Playloom Engine Data Storage VulnerabilityQuetrobits Playloom-Engine
- CVE-2024-47892GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)Imagination Technologies Graphics DDK
- CVE-2024-46971GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systemsImagination Technologies Graphics DDK
- CVE-2024-55887Ucum-java has an XXE vulnerability in XML parsingFHIR Ucum-java · org.fhir:ucum
- CVE-2024-55661Laravel Pulse Allows Remote Code Execution via Unprotected Query Methodlaravel pulse · laravel/pulse
- CVE-2024-54139Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameterCombodo iTop
- CVE-2024-54351WordPress Fancy Roller Scroller plugin <= 1.4.0 - CSRF to Stored XSS vulnerabilityThomas K Landis Fancy Roller Scroller
- CVE-2024-54347WordPress FloristPress plugin <= 7.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityBAKKBONE Australia FloristPress
- CVE-2024-54344WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityFahad Mahmood WP Quick Shop
- CVE-2024-54343WordPress Connect Contact Form 7 to Constant Contact plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilitythehowarde Connect Contact Form 7 to Constant Contact
- CVE-2024-54342WordPress Staggs plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilitySTAGGS
- CVE-2024-54341WordPress LabelGrid Tools plugin <= 1.3.58 - Reflected Cross Site Scripting (XSS) vulnerabilityLabelGrid Tools
- CVE-2024-54340WordPress Simple Presenter plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerabilitysylviavanos Simple Presenter
- CVE-2024-54339WordPress geoFlickr plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityjbd7 geoFlickr
- CVE-2024-54337WordPress DX Dark Site plugin <= 1.0.1 - CSRF to Stored Cross-Site Scripting vulnerabilityDevriX DX Dark Site
- CVE-2024-54336WordPress Projectopia plugin <= 5.1.7 - Account Takeover vulnerabilityProjectopia
- CVE-2024-54335WordPress ImmoToolBox Connect plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityImmoSoft ImmoToolBox Connect
- CVE-2024-54333WordPress Check Pincode For Woocommerce plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilitysilverplugins217 Check Pincode For Woocommerce
- CVE-2024-54330WordPress Hurrakify plugin <= 2.4 - Server Side Request Forgery (SSRF) vulnerabilityHurrakify
- CVE-2024-54329WordPress CleverNode Related Content plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerabilityMetup CleverNode Related Content
- CVE-2024-54328WordPress Invoice Payment for WooCommerce plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerabilitylinknacional Invoice Payment for WooCommerce
- CVE-2024-54327WordPress UNIVERSAM plugin < 8.59 - Reflected Cross Site Scripting (XSS) vulnerabilityUNIVERSAM
- CVE-2024-54325WordPress CarDealerPress plugin <= 6.6.2410.02 - Reflected Cross Site Scripting (XSS) vulnerabilityDealerTrend CarDealerPress
- CVE-2024-54324WordPress SMSify plugin <= 6.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilitymtomic SMSify
- CVE-2024-54322WordPress Media Downloader plugin <= 0.4.7.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEderson Peka Media Downloader
- CVE-2024-54320WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerabilityICDSoft Reseller Store
- CVE-2024-54319WordPress Kundgenerator plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilityKundgenerator
- CVE-2024-54312WordPress افزونه پیامک ووکامرس Persian WooCommerce SMS plugin <= 7.0.5 - Reflected Cross Site Scripting (XSS) vulnerabilityPersianScript Persian Woocommerce SMS
- CVE-2024-54305WordPress J&T Express Malaysia plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerabilityjtexpress J&T Express Malaysia
- CVE-2024-54304WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerabilityHive Support
- CVE-2024-54303WordPress Simple Payment plugin <= 2.3.8 - Reflected Cross Site Scripting (XSS) vulnerabilityIdo Kobelkowsky Simple Payment
- CVE-2024-54302WordPress VForm plugin <= 3.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityVikas Ratudi VPSUForm
- CVE-2024-54301WordPress FormFacade plugin <= 1.3.6 - Reflected Cross Site Scripting (XSS) vulnerabilitymanidoraisamy FormFacade
- CVE-2024-54299WordPress Revi.io plugin <= 5.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilityrevidev Revi.io
- CVE-2024-54290WordPress Role Includer plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerabilityJustin Fletcher Role Includer
- CVE-2024-54288WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLDD Web Design LDD Directory Lite
- CVE-2024-54282WordPress WP Mega Menu plugin <= 1.4.2 - PHP Object Injection vulnerabilityThemeum WP Mega Menu
- CVE-2024-54275WordPress CSV to html plugin <= 3.08 - Reflected Cross Site Scripting (XSS) vulnerabilitywibergsweb CSV to html
- CVE-2024-54274WordPress Octrace Support plugin <= 1.2.7 - Reflected Cross Site Scripting (XSS) vulnerabilityWordPress HelpDesk & Support Ticket System Plugin – Octrace…
- CVE-2024-54266WordPress ImageRecycle pdf & image compression plugin <= 3.1.16 - Reflected Cross Site Scripting (XSS) vulnerabilityImageRecycle pdf & image compression
- CVE-2024-54265WordPress Barcode Scanner and Inventory manager plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerabilityDmitry V. (CEO of "UKR Solution") Barcode Scanner with Inve…
- CVE-2024-54264WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilitycmorillas1 Shortcodes Blocks Creator Ultimate
- CVE-2024-54258WordPress Ni CRM Lead plugin <= 1.3.0 - SQL Injection vulnerabilityAnzar Ahmed Ni CRM Lead
- CVE-2024-54256WordPress Easy Blocks pro plugin <= 1.0.21 - Broken Access Control vulnerabilitySeerox Easy Blocks pro
- CVE-2024-54248WordPress Eewee Admin Custom plugin <= 1.8.2.4 - CSRF to Privilege Escalation vulnerabilityeewee admin custom
- CVE-2024-54240WordPress Blaze Online eParcel for WooCommerce plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityblazeonline Blaze Online eParcel for WooCommerce
- CVE-2024-54238WordPress Board Document Manager from CHUHPL plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCleveland Heights-University Heights Public Library Webdeve…
- CVE-2024-54237WordPress Ni CRM Lead plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerabilityAnzar Ahmed Ni CRM Lead
- CVE-2024-54236WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerabilityAnzar Ahmed Ni WooCommerce Bulk Product Editor
- CVE-2024-54235WordPress Shiptimize for WooCommerce plugin <= 3.1.86 - Reflected Cross Site Scripting (XSS) vulnerabilityShiptimize for WooCommerce
- CVE-2024-54233WordPress Advanced Control Manager plugin <= 2.16.0 - Reflected Cross Site Scripting (XSS) vulnerabilityoverclokk Advanced Control Manager for WordPress by ItalySt…
- CVE-2024-54231WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerabilityAnzar Ahmed Ni WooCommerce Order Export
- CVE-2023-41130WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerabilityPremmerce User Roles
- CVE-2023-39920WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerabilityThemeisle Redirection for Contact Form
- CVE-2023-38385WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerabilityArtbees JupiterX Core
- CVE-2023-36510WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerabilityReservation Diary ReDi Restaurant Reservation
- CVE-2023-35037WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerabilitySurfer
- CVE-2023-33996WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerabilityСleanTalk - Anti-Spam Protection Spam protection, AntiSpam,…
- CVE-2023-32585WordPress Portfolio Gallery – Responsive Image Gallery plugin <= 1.4.6 - Broken Access Control vulnerabilityTotal-Soft Portfolio Gallery – Responsive Image Gallery
- CVE-2023-32520WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerabilityWebcodin WCP Contact Form
- CVE-2023-32507WordPress Woo Custom Emails plugin <= 2.2 - Broken Access Control vulnerabilitywp3sixty Woo Custom Emails
- CVE-2023-30490WordPress Easing Slider plugin <= 3.0.8 - Plugin Settings Reset VulnerabilityMatthew Ruddy Easing Slider
- CVE-2023-25988WordPress Video Gallery – YouTube Gallery plugin <= 1.7.6 - Broken Access Control vulnerabilityVideo Gallery by Total-Soft Video Gallery – YouTube Gallery
- CVE-2024-22461Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability.Dell RecoverPoint for Virtual Machines
- CVE-2024-52066Potential stack corruption in Routing Service when using a malicious XML configuration documentRTI Connext Professional
- CVE-2024-52063Potential stack buffer write overflow in Connext applications while parsing malicious XML types documentRTI Connext Professional
- CVE-2024-52061Potential stack buffer overflow when parsing an XML typeRTI Connext Professional
- CVE-2024-52060Potential stack overflow when using XML configuration file referencing environment variablesRTI Connext Professional
- CVE-2024-52058Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requestsRTI Connext Professional
- CVE-2024-10783MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege EscalationMainWP Child – Securely Connects to the MainWP Dashboard to…
- CVE-2024-11839Insecure Deserialization via Runbooks ImportsPlexTrac
- CVE-2024-11838Local File InclusionPlexTrac
- CVE-2024-11837N1QL InjectionPlexTrac
- CVE-2024-11836Server-side Request ForgeryPlexTrac
- CVE-2024-11835Denial of ServicePlexTrac
- CVE-2024-11834Arbitrary File Write via PTRAC ImportPlexTrac
- CVE-2024-11833Arbitrary Directory Write via Runbooks Artifact UploadPlexTrac
- CVE-2024-21544Versions of the package spatie/browsershot before 5.0.1 are vulnerable to Improper Input Validation due to improper URL validation in the sespatie/browsershot
- CVE-2024-12212Horner Automation Cscape Out-of-bounds ReadHorner Automation Cscape
- CVE-2024-9508Horner Automation Cscape Out-of-bounds ReadHorner Automation Cscape
Medium, low and unrated 196
- CVE-2024-12553GeoVision GV-ASManager Missing Authorization Information Disclosure VulnerabilityGeoVision GV-ASManager
- CVE-2024-55890D-Tale allows Remote Code Execution through the Custom Filter Inputman-group dtale · dtale
- CVE-2024-9945Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0Fortra GoAnywhere MFT
- CVE-2024-54349WordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilitymashiurz Plain Post
- CVE-2024-54346WordPress Barter theme <= 1.6 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 Barter
- CVE-2024-54345WordPress Bicycleshop theme <= 1.5 - Cross Site Scripting (XSS) vulnerabilitysonalsinha21 Bicycleshop
- CVE-2024-54338WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilitychrister_f Hello Event Widgets For Elementor
- CVE-2024-54334WordPress Quran Phrases About Most People Shortcodes plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilityzeshanb Quran Phrases About Most People Shortcodes
- CVE-2024-54326WordPress GEO my WP plugin <= 4.5.0.4 - Broken Access Control vulnerabilityEyal Fitoussi GEO my WordPress
- CVE-2024-54323WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerabilitySaad Iqbal New User Approve
- CVE-2024-54321WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityHive Support
- CVE-2024-54318WordPress NiceJob plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerabilityNiceJob
- CVE-2024-54317WordPress Web Stories plugin <= 1.37.0 - Cross Site Scripting (XSS) vulnerabilityGoogle Web Stories
- CVE-2024-54316WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Restaurant & Cafe Addon for Elementor
- CVE-2024-54315WordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Events Addon for Elementor
- CVE-2024-54314WordPress Primary Addon for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilitynicheaddons Primary Addon for Elementor
- CVE-2024-54313WordPress FULL – Cliente plugin <= 3.1.25 - Local File Inclusion vulnerabilityFULL. FULL Customer
- CVE-2024-54311WordPress Mark New Posts plugin <= 7.5.1 - Broken Access Control vulnerabilityi.lychkov Mark New Posts
- CVE-2024-54310WordPress Gou Manage My Account Menu plugin <= 1.0.1.8 - Broken Access Control vulnerabilityAslam Khan Gouran Gou Manage My Account Menu
- CVE-2024-54309WordPress PostBox plugin <= 1.0.4 - Sensitive Data Exposure vulnerabilitywpdebuglog PostBox
- CVE-2024-54308WordPress Cryptocurrency Price Widget plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerabilityfalselight Cryptocurrency Price Widget
- CVE-2024-54307WordPress AIcomments plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerabilityaipost AIcomments
- CVE-2024-54306WordPress AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) vulnerabilityaitool AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best A…
- CVE-2024-54300WordPress AutoWP plugin <= 2.0.8 - Cross Site Request Forgery (CSRF) vulnerabilityBasar Ventures AutoWP
- CVE-2024-54298WordPress Car Dealer plugin <= 4.46 - Broken Access Control vulnerabilitysminozzi Car Dealer
- CVE-2024-54289WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerabilityawesomesupport Awesome Support
- CVE-2024-54287WordPress Advanced Blog Post Block plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityBest WP Developer Advanced Blog Post Block
- CVE-2024-54286WordPress Smaily for WP plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerabilitySmaily for WP
- CVE-2024-54278WordPress News Ticker for Elementor plugin <= 2.1.3 - Broken Access Control vulnerabilityPlugin Devs News Ticker for Elementor
- CVE-2024-54277WordPress Nias course plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityAlireza Aliniya Nias course
- CVE-2024-54276WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerabilitydevfelixmoira Poll Builder
- CVE-2024-54272WordPress Radius Blocks plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme Radius Blocks
- CVE-2024-54271WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerabilityArni Cinco WPCargo Track & Trace
- CVE-2024-54268WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerabilityGreg - SiteOrigin SiteOrigin Widgets Bundle
- CVE-2024-54267WordPress CM Answers plugin <= 3.2.6 - Broken Access Control vulnerabilityCreativeMindsSolutions CM Answers
- CVE-2024-54259WordPress DELUCKS SEO plugin <= 2.7.0 - Arbitrary File Download vulnerabilityDELUCKS SEO
- CVE-2024-54252WordPress Pinpoint Booking System Plugin <= 2.9.9.5.7 - Broken Access Control vulnerabilityDOTonPAPER Pinpoint Booking System
- CVE-2024-54250WordPress Prodigy Commerce plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerabilityprodigycommerce Prodigy Commerce
- CVE-2024-54246WordPress FAQs plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilityThink201 FAQs
- CVE-2024-54245WordPress Clients plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerabilityThink201 Clients
- CVE-2024-54244WordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityThink201 Easy Replace
- CVE-2024-54243WordPress Echoza plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerabilityThink201 Echoza
- CVE-2024-54242WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerabilityappsbd Simple Notification
- CVE-2024-54241WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerabilityAppsbd Elite Notification – Sales Popup, Social Proof, FOMO…
- CVE-2023-44149WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerabilityBeRocket Brands for WooCommerce
- CVE-2023-44147WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerabilityapasionados Comment Blacklist Updater
- CVE-2023-44142WordPress Inactive Logout plugin <= 3.2.2 - Broken Access Control vulnerabilityDeepen Bajracharya Inactive Logout
- CVE-2023-41952WordPress Fluent Forms plugin <= 5.0.8 - Broken Access Control vulnerabilityContact Form - WPManageNinja FluentForm
- CVE-2023-41951WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerabilityrtCamp rtMedia for WordPress, BuddyPress and bbPress
- CVE-2023-41875WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerabilitywpdirectorykit.com WP Directory Kit
- CVE-2023-41873WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerabilityminiOrange SAML SP Single Sign On
- CVE-2023-41870WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerabilityThemeum WP Crowdfunding
- CVE-2023-41869WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerabilityAlex Volkov WP Accessibility Helper
- CVE-2023-41866WordPress Automatic YouTube Gallery plugin <= 2.3.3 - Broken Access Control vulnerabilityTeam Plugins360 Automatic YouTube Gallery
- CVE-2023-41865WordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerabilitybqworks Slider Pro
- CVE-2023-41862WordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerabilityGuido VS Contact Form
- CVE-2023-41857WordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerabilityClickToTweet.com Click To Tweet
- CVE-2023-41849WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerabilityWP Happy Coders Posts Like Dislike
- CVE-2023-41848WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerabilityMajeed Raza Carousel Slider
- CVE-2023-41803WordPress BitPay Checkout for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerabilityBitPay Checkout for WooCommerce
- CVE-2023-41802WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerabilityTeam Heateor Super Socializer
- CVE-2023-41695WordPress Analytify plugin <= 5.1.0 - Broken Access Control vulnerabilityAdnan Analytify
- CVE-2023-41690WordPress WiserNotify Social Proof plugin <= 2.5 - Broken Access Control vulnerabilityWiser Notify WiserNotify Social Proof
- CVE-2023-41689WordPress Post to Google My Business (Google Business Profile) plugin <= 3.1.14 - Broken Access Control vulnerabilityKoen Reus Post to Google My Business
- CVE-2023-41688WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerabilityMad Fish Digital Bulk NoIndex & NoFollow Toolkit
- CVE-2023-41686WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerabilityilGhera Woocommerce Support System
- CVE-2023-41683WordPress TelSender plugin <= 1.14.11 - Broken Access Control + CSRF vulnerabilityPechenki TelSender
- CVE-2023-41671WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerabilitytychesoftwares Abandoned Cart Lite for WooCommerce
- CVE-2023-41664WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerabilityAlphaBPO Easy Newsletter Signups
- CVE-2023-41649WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerabilityOvic Team Ovic Product Bundle
- CVE-2023-41133WordPress Secure Admin IP plugin <= 2.0 - IP Spoofing vulnerabilityMichal Novák Secure Admin IP
- CVE-2023-41132WordPress Category Slider for WooCommerce plugin <= 1.4.15 - Broken Access Control vulnerabilityShapedPlugin Category Slider for WooCommerce
- CVE-2023-40678WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerabilityAndrew Fiebert Simple URLs
- CVE-2023-40670WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerabilityReviewX Team ReviewX
- CVE-2023-40334WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerabilityRealMag777 HUSKY
- CVE-2023-40331WordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerabilitybqworks Accordion Slider
- CVE-2023-40213WordPress Justified Gallery plugin <= 1.7.3 - Broken Access Control vulnerabilityMateusz Czardybon Justified Gallery
- CVE-2023-40203WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access ControlMailChimp Forms by MailMunch
- CVE-2023-40011WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerabilityStylemixThemes Cost Calculator Builder
- CVE-2023-40005WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access ControlSyed Balkhi Easy Digital Downloads
- CVE-2023-40003WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerabilityweDevs WP Project Manager
- CVE-2023-40001WordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerabilitySolidWP iThemes Sync
- CVE-2023-39997WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerabilitysupsystic.com Popup by Supsystic
- CVE-2023-39996WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access ControlWP OnlineSupport, Essential Plugin Accordion and Accordion…
- CVE-2023-39995WordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerabilityWP OnlineSupport, Essential Plugin Portfolio and Projects
- CVE-2023-39305WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerabilityDash Labs Yet Another Stars Rating
- CVE-2023-38514WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerabilitysocial share pro Social Share Icons & Social Share Buttons
- CVE-2023-38483WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerabilityDylan Blokhuis Instant CSS
- CVE-2023-38480WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerabilityCertain Dev Booster Elementor Addons
- CVE-2023-38479WordPress Simple Googlebot Visit plugin <= 1.2.4 - Broken Access Control vulnerabilityCodents Simple Googlebot Visit
- CVE-2023-38477WordPress QR code MeCard/vCard generator plugin <= 1.6.0 - Broken Access Control vulnerabilityStanislav Kuznetsov QR code MeCard/vCard generator
- CVE-2023-38475WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerabilityRedNao Donations Made Easy – Smart Donations
- CVE-2023-38383WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerabilityOnTheGoSystems Language
- CVE-2023-37989WordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerabilityEasyship WooCommerce Shipping Rates
- CVE-2023-37987WordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerabilityminiOrange YourMembership Single Sign On
- CVE-2023-37984WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerabilityExpressTech Quiz And Survey Master
- CVE-2023-37971WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerabilityMultiVendorX WooCommerce Product Stock Alert
- CVE-2023-37969WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerabilityThe African Boss Checkout with Zelle on Woocommerce
- CVE-2023-37967WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control VulnerabilityDesigninvento DirectoryPress
- CVE-2023-37887WordPress WPSchoolPress plugin <= 2.2.7 - Broken Access Control vulnerabilityWPSchoolPress Team WPSchoolPress
- CVE-2023-36681WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerabilityCool Plugins Cryptocurrency Widgets – Price Ticker & Coins…
- CVE-2023-36680WordPress Image Regenerate & Select Crop plugin <= 7.1.0 - Broken Access Control vulnerabilityIulia Cazan Image Regenerate & Select Crop
- CVE-2023-36531WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerabilityLiquidPoll – Advanced Polls for Creators and Brands
- CVE-2023-36528WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing VulnerabilityFeedbackWP kk Star Ratings
- CVE-2023-36526WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerabilityInqsys Technology Duplicate Post Page Menu & Custom Post Ty…
- CVE-2023-36519WordPress SW Product Bundles plugin <= 2.0.15 - Broken Access Control vulnerabilitywpthemego SW Product Bundles
- CVE-2023-36518WordPress Post Hit Counter plugin <= 1.3.2 - Broken Access ControlHugh Lashbrooke Post Hit Counter
- CVE-2023-36509WordPress CHP Ads Block Detector plugin <= 3.9.5 - Broken Access Control vulnerabilitySuresh Chand CHP Ads Block Detector
- CVE-2023-36506WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerabilityYITH WooCommerce Waiting List
- CVE-2023-35875WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerabilityJegstudio Gutenverse
- CVE-2023-35777WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerabilityThe Events Calendar
- CVE-2023-35052WordPress Directorist plugin <= 7.5.4 - Arbitrary Content Deletion vulnerabilitywpWax - WP Business Directory Plugin and Classified Listing…
- CVE-2023-35051WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerabilityCimatti Consulting Contact Forms by Cimatti
- CVE-2023-35046WordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerabilityDynamic.ooo Dynamic Visibility for Elementor
- CVE-2023-34387WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerabilityConstant Contact Forms
- CVE-2023-34381WordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerabilityGesundheit Bewegt Zippy
- CVE-2023-34376WordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerabilityRextheme Change WooCommerce Add To Cart Button Text
- CVE-2023-34019WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerabilityUncanny Owl Uncanny Toolkit for LearnDash
- CVE-2023-34014WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerabilityG5Theme Grid Plus
- CVE-2023-34009WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRFInisev Social Media & Share Icons
- CVE-2023-33998WordPress Easy Social Icons plugin <= 3.2.5 - Broken Access Control vulnerabilitycybernetikz Easy Social Icons
- CVE-2023-33995WordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerabilityPhoto Gallery Team Photo Gallery by 10Web
- CVE-2023-33994WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerabilityVeronaLabs Slimstat Analytics
- CVE-2023-33928WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerabilityWebToffee WordPress Backup & Migration
- CVE-2023-33324WordPress Easy Captcha plugin <= 1.0 - Broken Access Control vulnerabilitywppal Easy Captcha
- CVE-2023-33215WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerabilityTaggbox
- CVE-2023-32963WordPress Predictive Search for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerabilitya3rev Software WooCommerce Predictive Search
- CVE-2023-32798WordPress Simple Page Ordering plugin <= 2.5.0 - Broken Access Control vulnerability10up Simple Page Ordering
- CVE-2023-32601WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerabilityBooking Ultra Pro
- CVE-2023-32599WordPress reCAPTCHA for all plugin <= 1.22 - Broken Access Control vulnerabilityBill Minozzi reCAPTCHA for all
- CVE-2023-32593WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerabilityGS Plugins GS Pins for Pinterest
- CVE-2023-32586WordPress SoundCloud Is Gold plugin <= 2.5.1 - Broken Access Control vulnerabilityThomas Michalak Soundcloud Is Gold
- CVE-2023-32581WordPress WP-Chatbot for Messenger plugin <= 4.7 - Broken Access ControlMobileMonkey WP-Chatbot for Messenger
- CVE-2023-32574WordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerabilityFahad Mahmood Injection Guard
- CVE-2023-32519WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerabilityWebcodin WCP Contact Form
- CVE-2023-32506WordPress Link Whisper Free plugin <= 0.6.3 - Unauthenticated Broken Access Control vulnerabilityLink Whisper Free
- CVE-2023-28990WordPress Viral Mag theme <= 1.0.9 - Authenticated Arbitrary Plugin Activation VulnerabilityHashThemes Viral Mag
- CVE-2023-27456WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin ActivationHashThemes Total
- CVE-2022-47429WordPress Coming Soon Landing Page and Maintenance Mode WordPress Plugin plugin <= 2.2.0 - Broken Access Control8Degree Themes Coming Soon Landing Page and Maintenance Mod…
- CVE-2022-44578WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerabilityPierre JEHAN Owl Carousel
- CVE-2023-22697WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerabilitySurvey Maker team Survey Maker
- CVE-2022-47594WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access ControlWPDeveloper Essential Blocks for Gutenberg
- CVE-2022-47182WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access ControlWpexpertsio APIExperts Square for WooCommerce
- CVE-2022-47176WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerabilityDepicter Slider and Popup by Averta Depicter Slider
- CVE-2022-47168WordPress Printful Integration for WooCommerce plugin <= 2.2.3 - Cross Site Request Forgery (CSRF)Printful Integration for WooCommerce
- CVE-2022-46846WordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerabilityWP OnlineSupport, Essential Plugin Trending/Popular Post Sl…
- CVE-2022-46840WordPress JS Help Desk plugin <= 2.7.1 - Broken Access ControlJS Help Desk – Best Help Desk & Support Plugin
- CVE-2022-46811WordPress ALD Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 1.0.21 - Broken Access Control + CSRFVillaTheme(villatheme.com) ALD – Dropshipping and Fulfillme…
- CVE-2022-46807WordPress Stock Sync for WooCommerce plugin <= 2.3.2 - Broken Access ControlLauri Karisola / WP Trio Stock Sync for WooCommerce
- CVE-2022-46796WordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerabilityVillaTheme CURCY
- CVE-2022-46795WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerabilityTyche Softwares Print Invoice & Delivery Notes for WooComme…
- CVE-2022-45841WordPress Robo Gallery plugin <= 3.2.9 - Auth. Broken Access Control vulnerabilityRoboSoft Robo Gallery
- CVE-2022-45840WordPress Auto Affiliate Links plugin <= 6.2.1.5 - Unauth. Broken Access Control vulnerabilityLucian Apostol Auto Affiliate Links
- CVE-2022-45826WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerabilityWP Sunshine Sunshine Photo Cart
- CVE-2022-45819WordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerabilityPopup Maker
- CVE-2022-45806WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerabilityStrategy11 Form Builder Team Formidable Forms
- CVE-2022-43472WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerabilityStylemixThemes eRoom – Zoom Meetings & Webinar
- CVE-2024-28980Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH.Dell RecoverPoint for Virtual Machines
- CVE-2024-47984Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability.Dell RecoverPoint for Virtual Machines
- CVE-2024-24902Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability.Dell RecoverPoint for Virtual Machines
- CVE-2024-38488Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability.Dell RecoverPoint for Virtual Machines
- CVE-2024-48007Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability.Dell RecoverPoint for Virtual Machines
- CVE-2024-55889phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Framesthorsten phpMyFAQ · thorsten/phpmyfaq
- CVE-2024-48008Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability.Dell RecoverPoint for Virtual Machines
- CVE-2024-9608MyParcel <= 4.24.1 - Reflected Cross-Site Scriptingrichardperdaan MyParcel
- CVE-2024-11827Out of the Block: OpenStreetMap <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ootb_query Shortcodegsarig Out of the Block: OpenStreetMap
- CVE-2021-32007Missing security header: Referrer-Policy URLSecomea GateManager
- CVE-2024-52065Potential stack buffer write overflow in Persistence Service while parsing malicious environment variable on non-Windows systemsRTI Connext Professional
- CVE-2024-52064Potential stack buffer write overflow in Connext applications while parsing malicious license fileRTI Connext Professional
- CVE-2024-52062Potential stack buffer write overflow in Connext applications while parsing malicious XML types documentRTI Connext Professional
- CVE-2024-52059Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags.RTI Connext Professional
- CVE-2024-11012Notibar – Notification Bar for WordPress <= 2.1.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_textninjateam Notibar – Notification Bar for WordPress
- CVE-2024-12465Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scriptingpropertyhive Property Hive Stamp Duty Calculator
- CVE-2024-11275WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletionarraytics Timetics – Appointment Booking & Scheduling
- CVE-2024-12309Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Postsproperfraction Rate My Post – Star Rating Plugin by Feedbac…
- CVE-2024-12417Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Executionquantumcloud Simple Link Directory
- CVE-2024-11910WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemeum WP Crowdfunding
- CVE-2024-12042MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)inspireui MStore API – Create Native Android & iOS Apps On…
- CVE-2024-11911WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installationthemeum WP Crowdfunding
- CVE-2024-11754Booking System Trafft <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingameliabooking Booking System Trafft
- CVE-2024-12421Coupon Affiliates – Affiliate Plugin for WooCommerce <= 5.16.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scriptingelliotvs Coupon Affiliates – Affiliate Plugin for WooCommer…
- CVE-2024-12420WPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode Executionamauric WPMobile.App
- CVE-2024-12414Themify Store Locator <= 1.1.9 - Cross-Site Request Forgerythemifyme Themify Store Locator
- CVE-2024-11832Beaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingbeaverbuilder Beaver Builder Page Builder – Drag and Drop W…
- CVE-2024-10939Image Widget < 4.4.11 - Admin+ Stored XSSImage Widget
- CVE-2024-10678Ultimate Blocks < 3.2.4 - Contributor+ Stored XSSUltimate Blocks
- CVE-2024-12581Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scriptingstellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…
- CVE-2024-21543Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails.djoser
- CVE-2024-11809Primer MyData for Woocommerce <= 4.2.1 - Reflected Cross-Site Scriptingprimersoftware Primer MyData for Woocommerce
- CVE-2024-12579Minify HTML <= 2.1.10 - - Regular Expressions Denial of Serviceteckel Minify HTML
- CVE-2024-12574SVG Shortcode <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploadamrendesign SVG Shortcode
- CVE-2024-11767NewsmanApp <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingNewsmanApp
- CVE-2019-25221Responsive Filterable Portfolio <=1.0.8 - Authenticated (Admin+) SQL Injectionnik00726 Responsive Filterable Portfolio
- CVE-2024-12300AR for WordPress <= 7.3 - Missing Authorization to Unauthenticated Limited File Uploadwebandprint AR for WordPress
- CVE-2024-12572Hello in All Languages <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scriptingstathisg Hello In All Languages
- CVE-2024-55918An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl.