CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- pojo linkerWordPress Linker Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- om ak solutions slick popup: contact form 7 popup plugin, omaksolutions slick popup +1 moreWordPress Slick Popup Plugin <= 1.7.14 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- pixelgrade comments ratings, comments rating +1 moreWordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- jkohlbach store exporter for woocommerce – export products, export orders, export subscriptions, and more, visser store exporter for woocommerce +1 moreWordPress WooCommerce – Store Exporter Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- bright plugins pre-orders for woocommerceWordPress Pre-Orders for WooCommerce Plugin <= 1.2.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- chris yee momentopress for momento360WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- avirtum imagelinks, imagelinks interactive image builder for wordpress +1 moreWordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection7.6 High
- dev4press gd security headersWordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection7.6 High
- bplugins icons font loaderWordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection8.5 High
- ability, inc accessibility suite by online adaWordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection8.5 High
- posimyth nexterWordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection8.5 High
- creative solutions contact form generator : creative form builder for wordpress, creative-solutions contact form generator +1 moreWordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection8.5 High
- total-soft video gallery, video gallery by total-soft gallery – best wordpress youtube gallery plugin +1 moreWordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection7.6 High
- page visit counter advanced page visit counter – most wanted analytics plugin for wordpress, pagevisitcounter advanced page visit counter +1 moreWordPress Advanced Page Visit Counter Plugin <= 7.1.1 is vulnerable to SQL Injection8.5 High
- inspireui mstore api, mstore api +1 moreWordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection8.5 High
- appjetty copy or move commentsWordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL Injection8.5 High
- pressference exporterWordPress Pressference Exporter Plugin <= 1.0.3 is vulnerable to SQL Injection5.5 Medium
- castos seriously simple statsWordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection8.5 High
- ilghera woocommerce support systemWordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection7.6 High
- aiyaz, maheshpatel contact form 7 custom validationWordPress Contact form 7 Custom validation Plugin <= 1.1.3 is vulnerable to SQL Injection8.2 High
- msh134 wp reroute email, wp reroute email project reroute email +1 moreWordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to SQL Injection5.5 Medium
- felix welberg sis handballWordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection7.6 High
- daniel söderström / sidney van de stouwe subscribe to category, subscribe to category project to category +1 moreWordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection9.8 Critical
- rednao donations made easy – smart donations, donations made easy - smart donations +1 moreWordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection7.6 High
- weblizar coming soon page – responsive coming soon & maintenance mode, responsive coming soon \& maintenance mode +1 moreWordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection7.6 High
- kaizencoders short urlWordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection8.5 High
- jason crouse, veronalabs slimstat analyticsWordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection8.8 High
- kemal yazici - pluginpress shortcode imdbWordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection6.7 Medium
- weblizar the school management – education & learning management, school management - education \& learning management +1 moreWordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection6.7 Medium
- ability, inc accessibility suite by online adaWordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection6.4 Medium
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection6.7 Medium
- ortus solutions coldbox elixirOrtus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosure3.5 Low
- zscaler client connectorPAC Files Exposed to Internet Websites4.3 Medium
- mitsubishi electric corporation melsec iq-f series fx5-40ssc-g, melsec iq-f series fx5-40ssc-s, melsec iq-f series fx5-80ssc-g +496 more +498 moreArbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products10.0 Critical
- mitsubishi electric corporation melsec iq-f series fx5s-30mr/es, melsec iq-f series fx5s-30mt/es, melsec iq-f series fx5s-30mt/ess +140 more +142 moreDenial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module5.3 Medium
- mediatek lr12a, mt2731, mt2735 +66 more +68 moreIn modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could...6.5 Medium
- google android, mediatek, inc. mt2713, mt6580, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6983, mt6985, mt7921, mt8168, mt8175, mt8188, mt8195, mt8321, mt8365, mt8390, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8791t, mt8797, mt8798 +1 moreIn bluethooth service, there is a possible out of bounds reads due to improper input validation....5.5 Medium
- google android, mediatek mt2713, mt6895 +6 more +8 moreIn dpe, there is a possible out of bounds write due to a missing valid range checking. This could...6.7 Medium
- google android, mediatek mt2713, mt6895 +8 more +10 moreIn dpe, there is a possible out of bounds write due to a missing valid range checking. This could...6.7 Medium
- google android, mediatek mt6761, mt6763 +9 more +11 moreIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local...6.7 Medium
- national tax agency e-tax software, nta e-tax +1 moree-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE...5.5 Medium
- vaerys-dawn discordsailv2Vaerys-Dawn DiscordSailv2 Tag access control5.5 Medium
- qualitor, qualitor qalitor +1 moreQualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html...9.8 Critical
- redislabs redisgraphBuffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9...8.8 High
- mybbCross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.5.4 Medium
- frroutingbgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream...7.5 High
- frroutingbgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a ...9.8 Critical
- softing smartlink sw-htWeak ciphers vulnerability in Softing smartLink SW-HT5.9 Medium
- softing smartlink sw-htCross-site scripting vulnerability in Softing smartLink SW-HT7.2 High
- vaerys-dawn discordsailv2Vaerys-Dawn DiscordSailv2 Command Mention access control5.5 Medium
- Show moreLoading…