CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- suresh kumar mukhiya anywhere flash embedWordPress Anywhere Flash Embed Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- asdqwe dev ajax domain checkerWordPress Ajax Domain Checker Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- pickplugins accordionWordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- christina uechi add widgets to pageWordPress Add Widgets to Page Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- kreaturamedia layersliderWordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- yas global team permalinks customizerWordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- vim, fedoraproject fedora, neovim +1 more +3 moreVim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite3.6 Low
- diywebmastery footer putterWordPress Footer Putter Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)7.1 High
- fla-shop interactive world mapWordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ifeelweb post status notifier liteWordPress Post Status Notifier Lite Plugin <= 1.11.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
microcode_ctlTuxCareUpdate of microcode_ctlNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo score- premio chatyWordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- draytek vigor2960, vigor2960 firmware +1 moreDrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal6.5 Medium
- mage-people bus ticket booking with seat reservation, magepeople team wpbusticketly +1 moreWordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- tiencop wp extraWordPress WP EXtra Plugin <= 6.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpwax legal pages – privacy policy, terms & conditions, gdpr, ccpa, and cookie notice generator, legal pages +1 moreWordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- dang ngoc binh easy call now by thikshareWordPress Easy Call Now by ThikShare Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator information disclosure6.2 Medium
- peepso download community by peepso, peepso +1 moreWordPress Community by PeepSo Plugin <= 6.1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- infinite uploads big file uploads – increase maximum file upload size, infiniteuploads big file uploads +1 moreWordPress Big File Uploads Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- devolutions serverInformation leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an...5.3 Medium
- leadsterWordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- kreaturamedia layersliderWordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM Cloud Pak for Security information disclosure4.3 Medium
- thrive themes theme builder, thrivethemes thrive themes builder +1 moreWordPress Thrive Theme Builder Theme < 3.24.2 is vulnerable to Cross Site Request Forgery (CSRF)8.8 High
- gvectors wpdiscuz, gvectors team comments — wpdiscuz +1 moreWordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- codebard codebard's patron button and widgets for patreon, codebard\'s patron button and widgets for patreon +1 moreWordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mondula multi step formWordPress Multi Step Form Plugin <= 1.7.11 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- aazztech woocommerce product carousel sliderWordPress WooCommerce Product Carousel Slider Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- network optix nxcloudServer Spoofing Vulnerability in NxCloud8.3 High
- wattisit paygreen – ancienne version, paygreen - ancienne +1 moreWordPress PayGreen Plugin <= 4.10.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- aleksandar urošević my youtube channelWordPress YouTube Channel Plugin <= 3.23.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- cisco anyconnect secure mobility client, secure client +1 moreMultiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility...5.5 Medium
- cisco anyconnect secure mobility client, secure client +1 moreMultiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility...5.5 Medium
- cisco secure endpoint, secure endpoint private cloud +1 moreA vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an...5.0 Medium
- checkmkLivestatus injection in ajax_search7.6 High
- checkmkLivestatus injection in availability timeline7.6 High
- dell unity, unity operating environment, unity xt operating environment +1 more +3 moreDell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component....8.6 High
- userproplugin userproUserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection8.8 High
- userproplugin userproUserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions6.3 Medium
- wpchill cpo shortcodesCPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- userproplugin userpro, userpro community and user profile wordpress plugin community and user profile wordpress plugin +1 moreUserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- funnelforms, funnelforms interactive contact form and multi step form builder with drag & drop editor – funnelforms free +1 moreFunnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication4.3 Medium
- plerdy website optimization – plerdy, heatmap +1 moreWebsite Optimization – Plerdy <= 1.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- userproplugin userproUserPro <= 5.1.1 - Insecure Password Reset Mechanism9.8 Critical
- sammyb wp post columns, wp post columns project post columns +1 moreWP Post Columns <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- funnelforms, funnelforms interactive contact form and multi step form builder with drag & drop editor – funnelforms free +1 moreFunnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication4.3 Medium
- gopiplus popup with fancyboxPopup with fancybox <= 3.5 - Authenticated (Subscriber+) SQL Injection via Shortcode8.8 High
- funnelforms, funnelforms interactive contact form and multi step form builder with drag & drop editor – funnelforms free +1 moreFunnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode4.3 Medium
- Show moreLoading…