CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- vim, vim vim/vim, apple macos +3 more +5 moreUse After Free in vim/vim7.8 High
- gpac, gpac gpac/gpac +1 moreUse After Free in gpac/gpac5.3 Medium
- alfnru password recovery plugin, password recovery project recovery +1 moreVulnerability in the password recovery mechanism of Roundcube Password Recovery Plugin7.5 High
- alfnru password recovery plugin, password recovery project recovery +1 moreUser enumeration vulnerability in Roundcube Password Recovery Plugin5.3 Medium
- pexle chris library viewerWordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- column-matic project column-maticWordPress Column-Matic Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- devaldi ltd flowpaperWordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- 123.chat123.chat < 1.3.1 - Admin+ Stored XSS4.8 Medium
- solwininfotech user activity logUser Activity Log < 1.6.7 - IP Spoofing7.5 High
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/Read2.7 Low
- riverforest-wp media from ftpMedia from FTP < 11.17 - Author+ Arbitrary File Access8.8 High
- advancedfilemanager advanced file managerAdvanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access4.9 Medium
- robogallery robo gallery, unknown photo gallery, images, slider in rbs image gallery +1 moreRobo Gallery < 3.2.16 - Admin+ Stored XSS4.8 Medium
- ajaydsouza connections reloaded, archimidismertzanos atlast business, fashionable store +47 more +49 moreMultiple Themes - Reflected XSS6.1 Medium
- agile logix post timelinePost Timeline < 2.2.6 - Reflected XSS6.1 Medium
- agile logix store locator wordpress, agilelogix store locator +1 moreStore Locator WordPress < 1.4.13 - Reflected XSS6.1 Medium
- quantumcloud ai chatbot, wpbot +1 moreChatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder4.8 Medium
- solwininfotech user activity logUser Activity Log < 1.6.6 - Subscriber+ Log Export4.3 Medium
- quantumcloud ai chatbot, wpbot +1 moreChatbot < 4.7.8 - Admin+ Stored XSS in Language Settings4.8 Medium
- cozmoslabs profile builderProfile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation4.3 Medium
- zkteco zem800, zem800 firmware +1 moreInsecure direct object reference in ZKTeco ZEM8008.3 High
- bestdivichild business proWordPress Business Pro Theme <= 1.10.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- imagerecycle pdf & image compression, pdf \& image compression +1 moreWordPress ImageRecycle pdf & image compression Plugin <= 3.1.11 is vulnerable to Cross Site Scripting (XSS)7.1 High
- kangu, kangu para woocommerce +1 moreWordPress Kangu para WooCommerce Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- solwin infotech responsive wordpress slider – avartan slider lite, solwininfotech avartan-slider-lite +1 moreWordPress Avartan Slider Lite Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pixelgrade pixtypesWordPress PixTypes Plugin <= 1.4.15 is vulnerable to Cross Site Scripting (XSS)7.1 High
- djangoproject django, fedoraproject fedora +1 moreDjango Denial of service vulnerability in django.utils.encoding.uri_to_iri7.5 High
- hwk wp 404 auto redirect to similar postWordPress WP 404 Auto Redirect to Similar Post Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- lg led assistant, lg electronics lg-led assistant +1 morethumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability7.5 High
- aleksandar urošević stock tickerWordPress Stock Ticker Plugin <= 3.23.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- lg led assistant, lg electronics lg-led assistant +1 moreupdateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability7.5 High
- lg led assistant, lg electronics lg-led assistant +1 moresetThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability9.8 Critical
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.3.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- imagerecycle pdf & image compression, pdf \& image compression +1 moreWordPress ImageRecycle pdf & image compression Plugin <= 3.1.10 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wp-experts.in team wp categories widget, wp-experts wp-categories-widget +1 moreWordPress WP Categories Widget Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- atarim, atarim visual website collaboration, feedback & project management – atarim +1 moreWordPress Atarim Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- tencent wxsyncWordPress WxSync Plugin <= 2.7.23 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- bigbluebuttonWordPress BigBlueButton Plugin <= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ajay lulia wsecure lite, joomlaserviceprovider wsecure +1 moreWordPress wSecure Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- masaakitanaka booking packageWordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)7.1 High
- maennchen1.de wpshopgermany – protected shops, maennchen1 wpshopgermany - protected shops +1 moreWordPress wpShopGermany – Protected Shops Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gopi ramasamy wp tell a friend popup form, gopiplus wp-tell-a-friend-popup-form +1 moreWordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- xlplugins user email verification for woocommerce, woo-confirmation-email +1 moreWordPress User Email Verification for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- amitzy molongui, molongui author box for authors, co-authors, multiple authors and guest authors – molongui +1 moreWordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)7.1 High
- jeffrey-wp media library categoriesWordPress Media Library Categories Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gpac, gpac gpac/gpac +1 moreStack-based Buffer Overflow in gpac/gpac5.9 Medium
- gpac, gpac gpac/gpac +1 moreOut-of-bounds Write in gpac/gpac5.3 Medium
- lg led assistant, lg electronics lg-led assistant +1 moreUpload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability9.8 Critical
- google android, mediatek, inc. mt2713, mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6983, mt6985, mt8168, mt8175, mt8188, mt8195, mt8365, mt8666, mt8667, mt8673 +1 moreIn gnss service, there is a possible out of bounds read due to improper input validation. This...4.4 Medium
- google android, mediatek, inc. mt2713, mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6983, mt6985, mt8168, mt8175, mt8188, mt8195, mt8365, mt8666, mt8667, mt8673 +1 moreIn gnss service, there is a possible out of bounds read due to improper input validation. This...4.4 Medium
- Show moreLoading…