CVEs published January 2, 2025
239 CVEs were published on January 2, 2025: 2 critical, 42 high.
- Published
- 239
- Critical
- 2
- High
- 42
- Medium
- 194
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- D-Link DIR-816 A2
- 7
- Google Android
- 7
- Acronis Cyber Protect
- 6
- Beijing Yunfan Internet Technology Yunfan Learning Examinat…
- 3
- Acronis True Image
- 2
- AdvancedCoding wpDiscuz
- 2
- ASUS Router
- 2
- code-projects Chat System
- 2
- code-projects Job Recruitment
- 2
- CTFd
- 2
Critical 2
High 42
- CVE-2024-43769In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due Google Android
- CVE-2024-43768In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2024-43767In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input validation.Google Android
- CVE-2024-43764In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen.Google Android
- CVE-2024-43762In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code.Google Android
- CVE-2024-43097In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2024-43077In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption.Google Android
- CVE-2024-9950Abuse of Unauthenticated Compliance Recheck in SecureConnectorForescout SecureConnector
- CVE-2024-55543Local privilege escalation due to DLL hijacking vulnerability.Acronis Cyber Protect
- CVE-2023-48758WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerabilityCrocoblock JetEngine
- CVE-2024-39623WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerabilityCridioStudio ListingPro
- CVE-2024-56014WordPress Olivia Theme <= 0.9.5 - Reflected Cross Site Scripting (XSS) vulnerabilityMarkyis Cool Olivia
- CVE-2024-56267WordPress Interactive UK Map plugin <= 3.4.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityhtml5maps Interactive UK Map
- CVE-2024-56250WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerabilityGreg Ross Just Writing Statistics
- CVE-2024-56247WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerabilityAF themes WP Post Author
- CVE-2024-56026WordPress Simple Proxy plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityGreg – SiteOrigin Simple Proxy
- CVE-2024-56025WordPress AdWork Media EZ Content Locker plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerabilityadworkmedia AdWork Media EZ Content Locker
- CVE-2024-56024WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityDuoGeek Custom Dashboard Widget
- CVE-2024-56023WordPress WP eCommerce Quickpay plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityPerfectSolution WP eCommerce Quickpay
- CVE-2024-56022WordPress Preloader by WordPress Monsters plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityPreloader by WordPress Monsters
- CVE-2024-56018WordPress BU Section Editing Plugin <= 0.9.9 - Reflected Cross Site Scripting (XSS) vulnerabilityBU Web Team BU Section Editing
- CVE-2023-47693WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerabilityThemefic Ultimate Addons for Contact Form
- CVE-2023-47648WordPress EazyDocs plugin <= 2.3.5 - Broken Access Control vulnerabilitySpider Themes EazyDocs
- CVE-2023-47224WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerabilityWP Travel
- CVE-2023-47179WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerabilitymdalabar WooODT Lite
- CVE-2023-46632WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerabilityDavid Cramer My Shortcodes
- CVE-2023-45104WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerabilityWPDeveloper BetterLinks
- CVE-2024-56027WordPress Leads CRM plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerabilitybizswoop Leads CRM
- CVE-2024-56028WordPress Lemonade Social Networks Autoposter Pinterest plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilitylemonadestudio Lemonade Social Networks Autoposter Pinterest
- CVE-2024-56029WordPress Easy Language Switcher plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilitydreamwinner Easy Language Switcher
- CVE-2024-56030WordPress 10CentMail plugin <= 2.1.50 - Reflected Cross Site Scripting (XSS) vulnerabilityCarver Lab 10CentMail
- CVE-2024-56032WordPress FV Descriptions plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityFolioVision FV Descriptions
- CVE-2024-56033WordPress FAQs plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityThink201 FAQs
- CVE-2024-56034WordPress Services updates for customers plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityIrshad A.Khan Services updates for customers
- CVE-2024-56035WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityKurt Payne Upload Scanner
- CVE-2024-56036WordPress odPhotogallery plugin <= 0.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityOndrej Donek odPhotogallery
- CVE-2024-56037WordPress User Referral plugin <= 8.0 - Reflected Cross Site Scripting (XSS) vulnerabilitySoftClever Limited User Referral
- CVE-2024-56038WordPress SendSMS Plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilitycatalinsendsms SendSMS
- CVE-2024-56060WordPress HTML Forms plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilityLink Software HTML Forms
- CVE-2024-56069WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityazzaroco WP SuperBackup
- CVE-2024-13062An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution.ASUS Router
- CVE-2024-12912An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.ASUS Router
Medium, low and unrated 195
- CVE-2024-8447Narayana: deadlock via multiple join requests sent to lra coordinatornarayana · Red Hat JBoss EAP XP 5.0 Update +3
- CVE-2025-0173SourceCodester Online Eyewear Shop view_order.php sql injectionSourceCodester Online Eyewear Shop
- CVE-2024-56199phpMyFAQ Vulnerable to Stored HTML Injection at FAQthorsten phpMyFAQ · phpmyfaq/phpmyfaq +1
- CVE-2024-11717Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations.CTFd
- CVE-2024-11716While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in logic implementation alCTFd
- CVE-2024-12907XSS in Kentico 7Kentico CMS
- CVE-2025-0172code-projects Chat System deleteroom.php sql injectioncode-projects Chat System
- CVE-2024-55541Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage.Acronis Cyber Protect
- CVE-2024-55542Local privilege escalation due to excessive permissions assigned to Tray Monitor service.Acronis Cyber Protect
- CVE-2024-56414Web installer integrity check used weak hash algorithm.Acronis Cyber Protect
- CVE-2024-56413Missing session invalidation after user deletion.Acronis Cyber Protect
- CVE-2024-55540Local privilege escalation due to DLL hijacking vulnerability.Acronis Cyber Protect
- CVE-2022-45811WordPress Post Teaser plugin <= 4.1.5 - Auth. Broken Access Control vulnerabilityWeyHan Ng Post Teaser
- CVE-2022-47601WordPress WP Table Manager plugin <= 3.5.2 - Broken Access ControlJoomUnited WP Table Manager
- CVE-2023-23672WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerabilityLiquid Web / StellarWP GiveWP
- CVE-2023-32240WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerabilityXtemos WoodMart
- CVE-2023-39994WordPress ARMember Premium plugin <= 5.9.2 - Broken Access ControlRepute InfoSystems ARMember Premium
- CVE-2022-45830WordPress Analytify - Google Analytics Dashboard plugin <= 4.2.3 - Privilege Escalation vulnerabilityAnalytify
- CVE-2025-0171code-projects Chat System deleteuser.php sql injectioncode-projects Chat System
- CVE-2023-40327WordPress Putler Connector for WooCommerce plugin <= 2.12.0 - Unauthenticated Broken Access Control vulnerabilityPutler / Storeapps Putler Connector for WooCommerce
- CVE-2023-45272WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability10Web Map Builder for Google Maps
- CVE-2023-45633WordPress IMPress Listings plugin <= 2.6.2 - Broken Access Control vulnerabilityIDX IMPress Listings
- CVE-2022-41995WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access ControlGalleryape Gallery Images Ape
- CVE-2022-49035media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZELinux
- CVE-2024-56137MaxKB RCE vulnerability in function library1Panel-dev MaxKB
- CVE-2022-43476WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to Broken Access ControlDaniel Söderström / Sidney van de Stouwe Subscribe to Categ…
- CVE-2023-47778WordPress LuckyWP Scripts Control plugin <= 1.2.1 - Broken Access Control vulnerabilityLuckyWP Scripts Control
- CVE-2023-47807WordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerability10WebAnalytics
- CVE-2023-48739WordPress Porto Theme Functionality plugin < 2.12.1 - Broken Access Control vulnerabilityPorto Theme - Functionality
- CVE-2024-49385Sensitive information disclosure due to insecure folder permissions.Acronis True Image
- CVE-2024-55538Sensitive information disclosure due to missing authentication.Acronis True Image
- CVE-2024-13111Beijing Yunfan Internet Technology Yunfan Learning Examination System JWT Token SysUserControl improper authenticationBeijing Yunfan Internet Technology Yunfan Learning Examinat…
- CVE-2024-37237WordPress FS Poster plugin <= 6.5.8 - Cross Site Request Forgery (CSRF) vulnerabilityfs-code FS Poster
- CVE-2024-37241WordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityAutomattic WP Job Manager - Resume Manager
- CVE-2024-37438WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerabilityUncanny Owl Uncanny Toolkit Pro for LearnDash
- CVE-2024-13110Beijing Yunfan Internet Technology Yunfan Learning Examination System Exam Answer PaperController.java， information disclosureBeijing Yunfan Internet Technology Yunfan Learning Examinat…
- CVE-2024-37452WordPress Schema Lite theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerabilityMyThemeShop Schema Lite
- CVE-2024-37925WordPress BuddyBoss Theme theme <= 2.4.61 - Cross Site Request Forgery (CSRF) vulnerabilityBuddyBoss Theme
- CVE-2024-37931WordPress Point theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerabilityCreativthemes Point
- CVE-2024-38731WordPress i-amaze theme <= 1.3.7 - Cross Site Request Forgery (CSRF) vulnerabilityMarsian i-amaze
- CVE-2024-38732WordPress Patricia Blog theme <= 1.2 - Cross Site Request Forgery (CSRF) vulnerabilityVolThemes Patricia Blog
- CVE-2024-38764WordPress i-transform theme <= 3.0.9 - Cross Site Request Forgery (CSRF) vulnerabilityMarsian i-transform
- CVE-2024-13109Beijing Yunfan Internet Technology Yunfan Learning Examination System doc.html improper authorizationBeijing Yunfan Internet Technology Yunfan Learning Examinat…
- CVE-2024-38778WordPress WP Fast Total Search <= 1.69.234 - Cross Site Request Forgery (CSRF) vulnerabilityEpsiloncool WP Fast Total Search
- CVE-2024-13108D-Link DIR-816 A2 form2NetSniper.cgi access controlD-Link DIR-816 A2
- CVE-2024-56257WordPress Coins MarketCap plugin <= 5.5.8 - Cross Site Scripting (XSS) vulnerabilityCoolPlugins Coins MarketCap
- CVE-2024-56268WordPress Post Grid Elementor Addon plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerabilityhookandhook Post Grid Elementor Addon
- CVE-2024-56302WordPress ConvertCalculator for WordPress plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityjorisderuiter ConvertCalculator for WordPress
- CVE-2024-56266WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerabilityMP3 Audio Player for Music, Radio & Podcast by Sonaar
- CVE-2024-56264WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerabilityBeee ACF City Selector
- CVE-2024-56263WordPress GS Shots for Dribbble plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityGS Plugins GS Shots for Dribbble
- CVE-2024-56262WordPress GS Coaches plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityGS Plugins GS Coaches
- CVE-2024-56261WordPress Project Showcase plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityGS Plugins Project Showcase
- CVE-2024-56260WordPress ShopElement plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityStorePlugin ShopElement
- CVE-2024-56259WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerabilityPaolo GeoDirectory
- CVE-2024-56258WordPress Magazine Blocks plugin <= 1.3.20 - Cross Site Scripting (XSS) vulnerabilityBlockArt Magazine Blocks
- CVE-2024-56255WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerabilityStiofan AyeCode Connect
- CVE-2024-56254WordPress Move Addons for Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerabilitymoveaddons Move Addons for Elementor
- CVE-2024-56253WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerabilityData Tables Generator by Supsystic
- CVE-2024-56252WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerabilitythemelooks Enter Addons
- CVE-2024-56251WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerabilityEvent Espresso 4 Decaf
- CVE-2024-56248WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Download vulnerabilityLudwig You WPMasterToolKit
- CVE-2024-56246WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerabilityPOSIMYTH Nexter Blocks
- CVE-2024-56245WordPress Premium Blocks plugin <= 2.1.42 - Cross Site Scripting (XSS) vulnerabilityLeap13 Premium Blocks – Gutenberg Blocks for WordPress
- CVE-2024-56244WordPress Ashe Extra plugin <= 1.2.92 - Broken Access Control vulnerabilityWP Royal Ashe Extra
- CVE-2024-56243WordPress WPSSO Core plugin <= 18.18.1 - Broken Access Control vulnerabilityJS Morisset WPSSO Core
- CVE-2024-56242WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerabilitytychesoftwares Arconix Shortcodes
- CVE-2024-56241WordPress WPKoi Templates for Elementor plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerabilitywpkoithemes WPKoi Templates for Elementor
- CVE-2024-56240WordPress Pronamic Google Maps plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerabilityPronamic Google Maps
- CVE-2024-56239WordPress Themify Audio Dock plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilitythemifyme Themify Audio Dock
- CVE-2024-56238WordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerabilityQuantumCloud Floating Action Buttons
- CVE-2024-56237WordPress Contest Gallery plugin <= 24.0.3 - Cross Site Scripting (XSS) vulnerabilityWasiliy Strecker / ContestGallery developer Contest Gallery
- CVE-2024-56236WordPress Hestia Nginx Cache plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityJuni Hestia Nginx Cache
- CVE-2024-43927WordPress Email Address Encoder plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerabilityTill Krüss Email Address Encoder
- CVE-2024-38790WordPress Smartsupp plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerabilitySmartsupp – live chat, chatbots, AI and lead generation
- CVE-2024-38789WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerabilityMarco Milesi Telegram Bot & Channel
- CVE-2024-38766WordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerabilitymatomoteam Matomo Analytics
- CVE-2024-38765WordPress Oceanic theme <= 1.0.48 - Cross Site Request Forgery (CSRF) vulnerabilityouttheboxthemes Oceanic
- CVE-2024-38763WordPress Popularis Verse theme <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerabilitythemes4wp Popularis Verse
- CVE-2024-38762WordPress Event Tickets and Registration plugin <= 5.11.0.4 - Cross Site Request Forgery (CSRF) vulnerabilityStellarWP Event Tickets
- CVE-2024-38754WordPress Tagbox plugin <= 3.3 - Cross Site Request Forgery (CSRF) vulnerabilityTaggbox
- CVE-2024-38753WordPress Animated Rotating Words Plugin <= 5.6 - Cross Site Request Forgery (CSRF) vulnerabilityLabib Ahmed Animated Rotating Words
- CVE-2024-38751WordPress AdsforWP plugin <= 1.9.28 - Cross Site Request Forgery (CSRF) vulnerabilityMagazine3 Google Adsense & Banner Ads by AdsforWP
- CVE-2024-38729WordPress MBE eShip plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerabilitymbeelink MBE eShip
- CVE-2024-38691WordPress Metorik plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) vulnerabilityMetorik – Reports & Email Automation for WooCommerce
- CVE-2024-37937WordPress Rara Business theme <= 1.2.5 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Rara Business
- CVE-2024-37543WordPress Ultimate Auction plugin <= 4.2.5 - Cross Site Request Forgery (CSRF) vulnerabilityNitesh Ultimate Auction
- CVE-2024-37540WordPress Leaky Paywall plugin <= 4.21.2 - Cross Site Request Forgery (CSRF) vulnerabilityZEEN101 Leaky Paywall
- CVE-2024-37518WordPress The Events Calendar plugin <= 6.5.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityStellarWP The Events Calendar
- CVE-2024-37511WordPress Swift Performance Lite plugin <= 2.3.6.20 - Cross Site Request Forgery (CSRF) vulnerabilityswte Swift Performance Lite
- CVE-2024-37508WordPress Construction Landing Page theme <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Construction Landing Page
- CVE-2024-37503WordPress Lawyer Landing Page theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Lawyer Landing Page
- CVE-2024-37493WordPress Posterity theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerabilitysonalsinha21 Posterity
- CVE-2024-37491WordPress Rife Free theme <= 2.4.18 - Cross Site Request Forgery (CSRF) vulnerabilityapollo13themes Rife Free
- CVE-2024-37490WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerabilitywproyal Bard
- CVE-2024-37478WordPress Ashe theme <= 2.233 - Cross Site Request Forgery (CSRF) vulnerabilitywproyal Ashe
- CVE-2024-37473WordPress Trendy News theme <= 1.0.15 - Cross Site Request Forgery (CSRF) vulnerabilityblazethemes Trendy News
- CVE-2024-37469WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerabilitycreativethemeshq Blocksy
- CVE-2024-37467WordPress Hestia theme <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerabilitythemeisle Hestia
- CVE-2024-37458WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerabilityextendthemes Highlight
- CVE-2024-37451WordPress Travel Agency theme <= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Travel Agency
- CVE-2024-37450WordPress Benevolent theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Benevolent
- CVE-2024-37448WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerabilityfamethemes OnePress
- CVE-2024-37441WordPress NewsMash theme <= 1.0.34 - Cross Site Request Forgery (CSRF) vulnerabilitydesertthemes NewsMash
- CVE-2024-37435WordPress Perfect Portfolio theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Perfect Portfolio
- CVE-2024-37431WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerabilityextendthemes Mesmerize
- CVE-2024-37426WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Elegant Pink
- CVE-2024-37421WordPress JobScout theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme JobScout
- CVE-2024-37417WordPress Coachify theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerabilitywpcoachify Coachify
- CVE-2024-37413WordPress Preschool and Kindergarten theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Preschool and Kindergarten
- CVE-2024-37412WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerabilityblossomthemes Blossom Shop
- CVE-2024-37274WordPress WP Mobile Menu plugin <= 2.8.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityRui Guerreiro WP Mobile Menu
- CVE-2024-37272WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerabilitywptravelengine Travel Monster
- CVE-2024-37243WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerabilityblossomthemes Vandana Lite
- CVE-2024-37242WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerabilityAutomattic Newspack Newsletters
- CVE-2024-37240WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerabilitysbouey Falang multilanguage
- CVE-2024-37238WordPress WPAdverts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityGreg Winiarski WPAdverts
- CVE-2024-37236WordPress Loco Translate plugin <= 2.6.9 - Cross Site Request Forgery (CSRF) vulnerabilityTim W Loco Translate
- CVE-2024-37235WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityAdrian Tobey Groundhogg
- CVE-2024-37104WordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Chic Lite
- CVE-2024-37103WordPress Education Zone theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerabilityraratheme Education Zone
- CVE-2024-37102WordPress Vilva theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerabilityblossomthemes Vilva
- CVE-2024-37093WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityStylemix MasterStudy LMS
- CVE-2023-47692WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerabilityflothemesplugins Flo Forms
- CVE-2023-47689WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change VulnerabilityToast Plugins Animator
- CVE-2023-47661WordPress Dragfy Addons for Elementor plugin <= 1.0.2 - Broken Access Control + CSRF vulnerabilityDragfy Addons for Elementor
- CVE-2023-47647WordPress BadgeOS plugin <= 3.7.1.6 - Broken Access Control vulnerabilityLearningTimes BadgeOS
- CVE-2023-47557WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerabilitywp-buy Visitors Traffic Real Time Statistics
- CVE-2023-47523WordPress Auto Tag Creator plugin <= 1.0.2 - Broken Access Control vulnerabilityEcreate Infotech Auto Tag Creator
- CVE-2023-47515WordPress Seers | GDPR & CCPA Cookie Consent & Compliance plugin <= 8.1.1 - Broken Access Control vulnerabilitySeers
- CVE-2023-47241WordPress CoCart – Headless ecommerce plugin <= 3.11.2 - Broken Access Control vulnerabilityCoCart Headless CoCart – Headless ecommerce
- CVE-2023-47225WordPress Short URL plugin <= 1.6.8 - Broken Access Control vulnerabilityKaizenCoders Short URL
- CVE-2023-47188WordPress Simple Job Board plugin <= 2.10.5 - Broken Access Control vulnerabilityPressTigers Simple Job Board
- CVE-2023-47187WordPress Animated Rotating Words plugin <= 5.4 - Broken Access Control vulnerabilityLabib Ahmed Animated Rotating Words
- CVE-2023-47183WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerabilityStellarWP GiveWP
- CVE-2023-47180WordPress Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin <= 2.16.0 - Arbitrary Content Deletion vulnerabilityXLPlugins Finale Lite
- CVE-2023-46644WordPress WordPress CTA plugin <= 1.5.8 - Broken Access Control vulnerabilityWP CTA PRO WordPress CTA
- CVE-2023-46639WordPress kk Star Ratings plugin <= 5.4.5 - Broken Access Control vulnerabilityFeedbackWP kk Star Ratings
- CVE-2023-46637WordPress Generate Dummy Posts plugin <= 1.0.0 - Broken Access Control vulnerabilitySaurav Sharma Generate Dummy Posts
- CVE-2023-46635WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerabilityYITHEMES YITH WooCommerce Product Add-Ons
- CVE-2023-46633WordPress WP Glossary plugin <= 3.1.2 - Broken Access Control vulnerabilityTCBarrett Glossary
- CVE-2023-46631WordPress Product Recommendation Quiz for eCommerce plugin <= 2.1.2 - Broken Access Control vulnerabilityRevenueHunt Product Recommendation Quiz for eCommerce
- CVE-2023-46628WordPress WP Word Count plugin <= 3.2.4 - Broken Access Control vulnerabilityRedLettuce Plugins WP Word Count
- CVE-2023-46616WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerabilityNSquared Draw Attention
- CVE-2023-46612WordPress Mediabay plugin <= 1.6 - Broken Access Control vulnerabilitycodedraft Mediabay
- CVE-2023-46611WordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control Vulnerabilityyourownprogrammer YOP Poll
- CVE-2023-46610WordPress Quill Forms plugin <= 3.3.0 - Broken Access Control + CSRF vulnerabilityMohamed Magdy Quill Forms
- CVE-2023-46609WordPress FeedFocal plugin <= 1.2.2 - Broken Access Control vulnerabilityFeedFocal
- CVE-2023-46608WordPress DoLogin Security plugin <= 3.7.1 - Multiple Broken Access Control vulnerabilityWPDO DoLogin Security
- CVE-2023-46607WordPress WP iCal Availability plugin <= 1.0.3 - Broken Access Control vulnerabilityWP iCal Availability
- CVE-2023-46606WordPress AtomChat plugin <= 1.1.4 - Broken Access Control vulnerabilityTeam AtomChat AtomChat
- CVE-2023-46605WordPress Convertful – Your Ultimate On-Site Conversion Tool plugin <= 2.5 - Broken Access Control vulnerabilityRuslan Suhar Convertful – Your Ultimate On-Site Conversion…
- CVE-2023-46309WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerabilityAdvancedCoding wpDiscuz
- CVE-2024-13107D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access controlD-Link DIR-816 A2
- CVE-2023-46206WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerabilityWebの相談所 MW WP Form
- CVE-2023-46203WordPress Just Custom Fields plugin <= 3.3.2 - Broken Access Control vulnerabilityJustCoded / Alex Prokopenko Just Custom Fields
- CVE-2023-46196WordPress Social proof testimonials and reviews by Repuso plugin <= 4.97 - Broken Access Control vulnerabilitySocial proof testimonials and reviews by Repuso
- CVE-2023-46195WordPress Headline Analyzer plugin <= 1.3.1 - Broken Access Control vulnerabilityCoSchedule Headline Analyzer
- CVE-2023-46188WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerabilityJose Mortellaro Freesoul Deactivate Plugins – Plugin manage…
- CVE-2023-46083WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerabilityWP Chill Kali Forms
- CVE-2023-46082WordPress Broken Link Checker | Finder plugin <= 2.4.2 - Broken Access Control vulnerabilityCyberlord92 Broken Link Checker | Finder
- CVE-2023-46080WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerabilityFarhan Noor ApplyOnline – Application Form Builder and Mana…
- CVE-2023-46079WordPress Ashe Extra plugin <= 1.2.9 - Broken Access Control + CSRF vulnerabilityWP Royal Ashe Extra
- CVE-2023-46073WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRFMario Peshev DX Delete Attached Media
- CVE-2023-45828WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerabilityRumbleTalk Live Group Chat
- CVE-2023-45766WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerabilityAys Pro Poll Maker
- CVE-2023-45765WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerabilityweDevs WP ERP
- CVE-2023-45760WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerabilityAdvancedCoding wpDiscuz
- CVE-2023-45649WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerabilitycodepeople Appointment Hour Booking
- CVE-2023-45636WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerabilityWebToffee WordPress Backup & Migration
- CVE-2023-45631WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilitywpdevart Responsive Image Gallery, Gallery Album
- CVE-2023-45275WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerabilityWP Chill Kali Forms
- CVE-2023-45271WordPress ProductX – Gutenberg WooCommerce Blocks plugin <= 2.7.8 - Broken Access Control vulnerabilityWPXPO WowStore
- CVE-2023-45110WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerabilityboldthemes Bold Timeline Lite
- CVE-2023-45101WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerabilityCusRev Customer Reviews for WooCommerce
- CVE-2023-45061WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerabilityawsm.in WP Job Openings
- CVE-2023-45045WordPress WP Custom Widget area plugin <= 1.2.5 - Broken Access Control vulnerabilitykrozero WP Custom Widget area
- CVE-2023-45002WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerabilityweDevs WP User Frontend
- CVE-2023-44988WordPress WP Custom Admin Interface plugin <= 7.32 - Broken Access Control vulnerabilityMartin Gibson WP Custom Admin Interface
- CVE-2023-44258WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerabilityvberkel Schema App Structured Data
- CVE-2024-13106D-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access controlD-Link DIR-816 A2
- CVE-2024-13105D-Link DIR-816 A2 DHCPD Setting form2Dhcpd.cgi access controlD-Link DIR-816 A2
- CVE-2024-13104D-Link DIR-816 A2 WiFi Settings form2AdvanceSetup.cgi access controlD-Link DIR-816 A2
- CVE-2024-13103D-Link DIR-816 A2 Virtual Service form2AddVrtsrv.cgi access controlD-Link DIR-816 A2
- CVE-2024-13102D-Link DIR-816 A2 DDNS Service access controlD-Link DIR-816 A2
- CVE-2024-56019WordPress Inline Footnotes Plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerabilitygavinr Inline Footnotes
- CVE-2024-13093code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injectioncode-projects Job Recruitment
- CVE-2024-13092code-projects Job Recruitment Job Post search_ajax.php sql injectioncode-projects Job Recruitment
- CVE-2024-12595AHAthat Plugin <= 1.6 - Reflected XSS via REQUEST_URIAHAthat Plugin
- CVE-2024-11357Goodlayers Core < 2.0.10 - Contributor+ Stored XSSgoodlayers-core
- CVE-2024-11184WP Enabled SVG <= 0.7 - Author+ Stored XSS via SVGwp-enable-svg · mwdelaney/wp-enable-svg
- CVE-2002-20002The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptogr
- CVE-2024-48197Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the w
- CVE-2024-56830The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand() if no strong randomization module is present.
- CVE-2025-22214Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection.