CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- ibm cics tx advanced, cics tx +1 moreIBM CICS TX Advanced cross-site scripting6.1 Medium
- ibm cics tx advanced, cics tx +1 moreIBM CICS TX information disclosure4.3 Medium
- prashant walke wp all backupWordPress WP All Backup Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)6.3 Medium
- brandbrilliance post state tagsWordPress Post State Tags Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- krzysztof wielogórski stop referrer spamWordPress Stop Referrer Spam Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- scriptburn wp hide postWordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- kebo twitter feedWordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreWordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- bala krishna, sergey yakovlev category seo meta tagsWordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- web-dorado wdsocialwidgetsWordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- fluenx deepl api translation plugin, deepl api translation +1 moreWordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- daext autolinks managerWordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- themelocation remove add to cart woocommerceWordPress Remove Add to Cart WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- blackbam custom header imagesWordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- webcodin wcp openweatherWordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cimatti wordpress contact forms, cimatti consulting wordpress contact forms by cimatti +1 moreWordPress Contact Forms by Cimatti Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- aguidrevitch wp meteor website speed optimization addon, wp-meteor wp meteor +1 moreWordPress WP Meteor Page Speed Optimization Topping Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dedecmsDedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.5.4 Medium
- iteachyou dreamer cmsAn issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a...4.3 Medium
- dreamer cms project cms, iteachyou dreamer cms +1 moreDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- dreamer cms project cms, iteachyou dreamer cms +1 moreDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- clickstudios passwordstateAn issue was discovered in Click Studios Passwordstate before 9811. Existing users (Security...4.7 Medium
- free5gc, free5gc smf, upf +2 moreBuffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to...7.5 High
- code-projects blood bankSQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run...5.5 Medium
- code-projects blood bankCross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers...6.1 Medium
- code-projects blood bankCross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows...6.1 Medium
- code-projects blood bankSQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers...5.5 Medium
- code-projects blood bankSQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers...5.5 Medium
- code-projects blood bankCross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run...6.1 Medium
- code-projects blood bankCross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows...6.1 Medium
- code-projects blood bankSQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers...5.5 Medium
- 闪电博 多合一搜索自动推送管理插件-支持baidu/google/bing/indexnow/yandex/头条, wbolt all-in-one search automatic push management +1 moreWordPress 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Plugin <= 4.2.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- expresstech quiz and survey master – best quiz, exam and survey plugin for wordpress, quiz and survey master +1 moreWordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpindeed debug assistantWordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)8.8 High
- accesspress themes wp tfeedWordPress WP TFeed Plugin <= 1.6.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- wpgrim dynamic xml sitemaps generator for googleWordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- meril blog floating buttonWordPress Blog Floating Button Plugin <= 1.4.12 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- gl spice new adman, new adman project adman +1 moreWordPress New Adman Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- evgen yurchenko wp transliteraWordPress WP Translitera Plugin <= p1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpgrim classic editor and classic widgetsWordPress Classic Editor and Classic Widgets Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- breakdance elegant custom fontsWordPress Elegant Custom Fonts Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- themehunk big storeWordPress Big Store Theme <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- ifeelweb affiliate super assistentWordPress Affiliate Super Assistent Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wow-company side menu lite – add sticky fixed buttons, side menu lite +1 moreWordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mmrs151 daily prayer timeWordPress Daily Prayer Time Plugin <= 2023.03.08 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- jens törnell wp page numbersWordPress WP Page Numbers Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- checkpoint endpoint security, harmony endpoint. +1 moreLocal Privliege Escalation in Check Point Endpoint Security Remediation Service7.8 High
- audrasjb reusable blocks extendedWordPress Reusable Blocks Extended Plugin <= 0.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- vsourz cf7 invisible recaptchaWordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- flippercode wordpress plugin for google maps – wp maps (formerly wp google map plugin), weplugins wp maps +1 moreWordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- Show moreLoading…