CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- poeditorWordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
apache-poiOSS-FuzzSecurity exception in org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.applyNo score- universitat politècnica de valència (upv) upv peix, upv peix +1 moreAuthorization Bypass on UPV PEIX5.3 Medium
libxml2OSS-FuzzHeap-buffer-overflow in xmlDictLookupInternalNo score- nxlog managerCross-Site Request Forgery on NXLog Manager6.5 Medium
- thimpress wp pipesWordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- nxlog managerCross-Site Request Forgery on NXLog Manager6.5 Medium
- nxlog managerXSS on NXLog Manager4.6 Medium
- dotstore fraud prevention for woocommerceWordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- multidots product attachment for woocommerceWordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- crudlab wp like buttonWordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- antsanchez easy cookie lawWordPress Easy Cookie Law Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- jfrog artifactoryJFrog Artifactory Improper header input validation leads to email manipulation sent from the platform6.5 Medium
- buddybossBuddyBoss XSS vulnerability6.3 Medium
- buddybossBuddyBoss XSS vulnerability9.0 Critical
- buddybossAuthorization Bypass on BuddyBoss5.4 Medium
- futuriowp futurio extraWordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- joraniSQL Injection on Jorani8.8 High
- salesagility salesagility/suitecrm, suitecrm +1 moreImproper Access Control in salesagility/suitecrm8.1 High
- codemiq wp html mailWordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreCross-site Scripting (XSS) - Stored in salesagility/suitecrm8.9 High
- salesagility salesagility/suitecrm, suitecrm +1 moreSQL Injection in salesagility/suitecrm6.4 Medium
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige8.8 High
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige8.8 High
- riello ups netman-204, riello-ups netman 204 firmware +1 moreNetMan 204 Remote Code Execution10.0 Critical
- sean barton (tortoise it) sb child listWordPress SB Child List Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- riello ups netman-204, riello-ups netman 204 firmware +1 moreInformation disclosure in NetMan 2045.3 Medium
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige8.8 High
- riello ups netman-204, riello-ups netman 204 firmware +1 moreAdmin password reset in NetMan 2048.1 High
- trustindex wp testimonialsWordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige6.5 Medium
- 99robots header footer code managerWordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- ays-pro photo gallery by ays – responsive image gallery, photo gallery, photo gallery team gallery by ays – responsive image gallery +2 moreWordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- fetch designs sign-up sheetsWordPress Sign-up Sheets Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige7.6 High
- radiustheme the post gridWordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige8.8 High
- meks audio player, easy ads widget, easy maps +17 more +19 moreCross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks4.3 Medium
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige8.8 High
- artica pfms pandora fms, pandora fms fms +1 moreStored Cross Site Scripting in syslog section6.7 Medium
- artica pfms pandora fms, pandora fms fms +1 moreDisabling the administrator's account through cross-site request forgery6.7 Medium
- gopi ramasamy wp tell a friend popup form, gopiplus wp-tell-a-friend-popup-form +1 moreWordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- anshul labs mobile address bar changerWordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- alain gonzalez google-map-shortcodeWordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- mike perelink pro, perelink pro project pro +1 moreWordPress Perelink Pro Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- taboola, tablooa +1 moreWordPress Taboola Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- oxygen builder builder, soflyy oxygen, oxygen builder +2 moreWordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- cyle conoly wp-flyboxWordPress WP-FlyBox Plugin <= 6.46 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- saas disablerWordPress Disabler Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gtmetrix, gtmetrix for wordpress +1 moreWordPress GTmetrix for WordPress Plugin <= 0.4.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- Show moreLoading…