CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- nautobotExposure of hashed user passwords via REST API in Nautobot6.5 Medium
- cisco ios xe software, ios xe, ios xe web ui +2 moreA vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated,...7.2 High
- masterk very simple google maps, very simple google maps project simple google maps +1 moreVery Simple Google Maps <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- ninjateam live chat with facebook messengerLive Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- cmc3215 delete meDelete Me <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode4.9 Medium
- bannersky bsk pdf managerBSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- advanced menu widget project menu widget, johnnypea advanced menu widget +1 moreAdvanced Menu Widget <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- halgatewood reusable text blocksReusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode5.5 Medium
- wp font awesome project font awesome, zayedbaloch wp font awesome +1 moreWP Font Awesome <= 1.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- clickdatos protección de datos rgpd, proteccion de datos rgpd +1 moreWordPress Protección de Datos RGPD Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- egeorjon eg-attachmentsWordPress EG-Attachments Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- osmansorkar ajax archive calendarWordPress Ajax Archive Calendar Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- maileon, xqueue gmbh maileon for wordpress +1 moreWordPress Maileon Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- xydac ultimate taxonomy managerWordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAddress bar spoofing via bidirectional characters6.5 Medium
- mozilla firefoxMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...9.8 Critical
- mozilla firefoxA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt....4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring garbage collection extra operations were performed on a object that should not be. This...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA website could have obscured the full screen notification by using the file open dialog. This...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDrivers are not always robust to extremely large draw calls and in some cases this scenario could...7.5 High
- mozilla firefoxAn attacker with temporary script access to a site could have set a cookie containing invalid...5.3 Medium
- mozilla firefoxUsing iterative requests an attacker was able to learn the size of an opaque response, as well as...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Medium
- libsyn publisher hubWordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- leadsquared suite, leadsquared, inc leadsquared suite +1 moreWordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- happybox newsletter & bulk email sender – email newsletter plugin for wordpress, newsletter \& bulk email sender +1 moreWordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- scribit proofreadingWordPress Proofreading Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)7.1 High
- fastwpspeed fast wp speedWordPress Fast WP Speed Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- martin gibson wp gotowebinarWordPress WP GoToWebinar Plugin <= 14.45 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alex raven wp report postWordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- stephanie leary next pageWordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wokamoto simple tweetWordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gopi ramasamy scroll post excerptWordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- joovii sendle shipping plugin, sendle shipping +1 moreWordPress Sendle Shipping Plugin <= 5.13 is vulnerable to Cross Site Scripting (XSS)7.1 High
- mitchell bennis simple file listWordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- peter keung peter’s custom anti-spam, peterkeung peter\'s custom anti-spam +1 moreWordPress Peter’s Custom Anti-Spam Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- amministrazione trasparente project trasparente, marco milesi amministrazione trasparente +1 moreWordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- farhan noor applyonline – application form builder and manager, spiderteams applyonline - application form builder and manager +1 moreWordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- print, pdf, & email by printfriendly pdf, email by printfriendly, printfriendly print\, pdf\, email by printfriendly +1 moreWordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- buddyboss buddypress global searchWordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution easy testimonial slider and formWordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- posimyth nexter extensionWordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- syed balkhi wp lightbox 2WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- henryholtgeerts pdf blockWordPress PDF Block Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- anurag deshmukh cpt shortcode generatorWordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alimir wp ulike – most advanced wordpress marketing toolkit, technowich wp ulike +1 moreWordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- eventprime – events calendar, bookings and tickets, metagauss eventprime, eventprime – events calendar, bookings and tickets +2 moreWordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…