CVEs published January 4, 2025
39 CVEs were published on January 4, 2025: 1 critical, 9 high.
- Published
- 39
- Critical
- 1
- High
- 9
- Medium
- 28
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- code-projects Online Shoe Store
- 5
- IBM Engineering Lifecycle Optimization Publishing
- 5
- Campcodes School Faculty Scheduling System
- 2
- code-projects Point of Sales and Inventory Management System
- 2
- akashmalik Scratch & Win – Giveaways and Contests. Boost su…
- 1
- alexacrm Dynamics 365 Integration
- 1
- aresit WP Compress – Instant Performance & Speed Optimizati…
- 1
- Campcodes Project Management System
- 1
- Campcodes Student Grading System
- 1
- code-projects Student Management System
- 1
Critical 1
High 9
- CVE-2024-41766IBM Engineering Lifecycle Optimization - Publishing denial of serviceIBM Engineering Lifecycle Optimization Publishing
- CVE-2024-41767IBM Engineering Lifecycle Optimization - Publishing SQL injectionIBM Engineering Lifecycle Optimization Publishing
- CVE-2024-10957UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injectiondavidanderson UpdraftPlus: WP Backup & Migration Plugin
- CVE-2024-10932Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'inisev BackupBliss – Backup & Migration with Free Cloud Sto…
- CVE-2025-22384An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
- CVE-2025-22386An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
- CVE-2025-22387An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
- CVE-2025-22389An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.
- CVE-2025-22390An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.
Medium, low and unrated 29
- CVE-2025-0214TMD Custom Header Menu index.php sql injectionTMD Custom Header Menu
- CVE-2025-0213Campcodes Project Management System update_forms.php unrestricted uploadCampcodes Project Management System
- CVE-2025-0212Campcodes Student Grading System view_students.php sql injectionCampcodes Student Grading System
- CVE-2025-0211Campcodes School Faculty Scheduling System index.php file inclusionCampcodes School Faculty Scheduling System
- CVE-2024-41763IBM Engineering Lifecycle Optimization - Publishing information disclosureIBM Engineering Lifecycle Optimization Publishing
- CVE-2024-41765IBM Engineering Lifecycle Optimization - Publishing directory traversalIBM Engineering Lifecycle Optimization Publishing
- CVE-2024-41768IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exceptionIBM Engineering Lifecycle Optimization Publishing
- CVE-2025-0210Campcodes School Faculty Scheduling System ajax.php sql injectionCampcodes School Faculty Scheduling System
- CVE-2025-0208code-projects Online Shoe Store summary.php sql injectioncode-projects Online Shoe Store
- CVE-2025-0207code-projects Online Shoe Store login.php sql injectioncode-projects Online Shoe Store
- CVE-2025-0206code-projects Online Shoe Store index.php access controlcode-projects Online Shoe Store
- CVE-2024-12195WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injectionwedevs Project Manager – AI Powered Project Management, Tas…
- CVE-2024-12279WP Social AutoConnect <= 4.6.2 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingjustin_k WP Social AutoConnect
- CVE-2024-12475WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpexpertsio WP Multistore Locator — WP Store Locator Plugin…
- CVE-2024-12221Turnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce Parameterwpweaver Turnkey bbPress by WeaverTheme
- CVE-2025-0205code-projects Online Shoe Store details2.php sql injectioncode-projects Online Shoe Store
- CVE-2024-11930Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks ShortcodeTaskbuilder – Project Management & Task Management Tool Wit…
- CVE-2025-0204code-projects Online Shoe Store details.php sql injectioncode-projects Online Shoe Store
- CVE-2024-12545Scratch & Win – Giveaways and Contests <= 2.7.1 - Cross-Site Request Forgery via reset_installation Functionakashmalik Scratch & Win – Giveaways and Contests. Boost su…
- CVE-2024-11974Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parametersdglingren Media Library Assistant
- CVE-2024-12701WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scriptingxylus WP Smart Import : Import any XML File to WordPress
- CVE-2024-12047WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameteraresit WP Compress – Instant Performance & Speed Optimizati…
- CVE-2025-0203code-projects Student Management System DbFunction.php showSubject1 sql injectioncode-projects Student Management System
- CVE-2025-0202TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusionTCS BaNCS
- CVE-2025-0201code-projects Point of Sales and Inventory Management System update_account.php sql injectioncode-projects Point of Sales and Inventory Management System
- CVE-2025-0200code-projects Point of Sales and Inventory Management System search_num.php sql injectioncode-projects Point of Sales and Inventory Management System
- CVE-2025-22383An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
- CVE-2025-22385An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
- CVE-2025-22388An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0.