CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- viessmann vitogate 300, vitogate 300 firmware +1 moreViessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password6.3 Medium
- foru cmsForU CMS index.php code injection4.7 Medium
- beplus sermon'e – sermons online, bearthemes sermon\'e - sermons online +1 moreWordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- creativehassan snap pixelWordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- surecart, surecart wordpress ecommerce for creating fast online stores +1 moreWordPress SureCart Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- soundminerSoundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7.5 High
- fortectFortect - CWE-428: Unquoted Search Path or Element6.3 Medium
- one, oneidentity password manager +1 moreOne Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation7.6 High
- acronis cyber protect 15, cyber protect +1 moreStored cross-site scripting (XSS) vulnerability in protection plan name. The following products...6.7 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authorization. The following...7.1 High
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to cleartext storage of sensitive information. The following...5.5 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to spell-jacking. The following products are affected:...5.7 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to improper authorization. The following products are...3.5 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information manipulation due to cross-site request forgery. The following products are...3.1 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information manipulation due to cross-site request forgery. The following products are...3.1 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to insufficient token field masking. The following products...3.5 Low
- acronis cyber protect 15, cyber protect +1 moreLocal privilege escalation due to insecure folder permissions. The following products are...3.3 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information leak through log files. The following products are affected: Acronis Cyber...4.4 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authorization. The following...4.6 Medium
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to cleartext storage of sensitive information in memory. The...2.2 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authentication. The following...6.1 Medium
- ultimatelysocial social media share buttons & social sharing icons, social media share buttons \& social sharing icons +1 moreWordPress Social Media & Share Icons Plugin <= 2.8.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- everest themes arya multipurpose pro, everestthemes arya multipurpose theme +1 moreWordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
- happy addons elementor addons pro, wedevs happy addons for elementor +1 moreWordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- everest themes news pro, everestthemes everest news +1 moreWordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- notfound bridge coreWordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- mythemeshop url shortener by mythemeshop, url shortener +1 moreWordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)7.1 High
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreLG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere5.0 Medium
- mrv logging administration panelSQLi in MRV Tech's Logging Administration Panel9.8 Critical
- cornel raiu wp search analyticsWordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- gophish admin panel, hedeftakip admin portal +1 moreSQLi in Hedef Trackings Admin Panel9.8 Critical
- abel ruiz guruwalk affiliates, guruwalk affiliates +1 moreWordPress GuruWalk Affiliates Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- sitekit project sitekitWordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- ankit agarwal, priyanshu mittal easy coming soonWordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- usta aybsIDOR in Usta AYBS8.8 High
- gopi ramasamy vertical marquee plugin, gopiplus vertical marquee +1 moreWordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- pluginops landing page builderWordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ekakin shihonkanri plusRelative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local...7.8 High
- twinpictures collapse-o-maticWordPress Collapse-O-Matic Plugin <= 1.8.5.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- jason crouse, veronalabs slimstat analyticsWordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- getlasso simple urlsWordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pdfcrowd save as pdf plugin by pdfcrowd, save as pdf +1 moreWordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- pdfcrowd save as image plugin by pdfcrowd, save as image +1 moreWordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rednao donations made easy – smart donations, smart donations +1 moreWordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)7.1 High
- rextheme wp vrWordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- dev4press gd security headersWordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- 93digital typing effectWordPress Typing Effect Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- carrcommunications rsvpmakerWordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- carrcommunications rsvpmakerWordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- Show moreLoading…