CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- elijaa phpmemcachedadminImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in PHPMemcachedAdmin9.8 Critical
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login, registrationmagic – custom registration forms, user registration, payment, and user login +2 moreWordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- 4d, 4d server, server.exe +1 more +3 moreUncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server6.5 Medium
- nicheaddons events addon for elementorWordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control6.5 Medium
- espocrmUnrestricted Upload of File with Dangerous Type in EspoCRM4.7 Medium
- espocrmUnrestricted Upload of File with Dangerous Type in EspoCRM4.7 Medium
- aatifaneeq voovi, voovi social networking script social networking script +1 moreCross-site Scripting vulnerability in Voovi Social Networking Script6.5 Medium
- aatifaneeq voovi, voovi social networking script social networking script +1 moreCross-site Scripting vulnerability in Voovi Social Networking Script6.5 Medium
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- s-sols seraphinite post .docx source, seraphinite solutions post .docx source +1 moreWordPress Seraphinite Post .DOCX Source Plugin <= 2.16.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- aatifaneeq voovi, voovi social networking script social networking script +1 moreSQL injection in Voovi Social Networking Script9.8 Critical
- super blog me broken link checker for youtubeWordPress Broken Link Checker for YouTube Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- andrea landonio taxonomy filterWordPress Taxonomy filter Plugin <= 2.2.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- presstigers simple testimonials showcaseWordPress Simple Testimonials Showcase Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
wolfmqttOSS-FuzzUNKNOWN READ in MqttProps_FreeNo score- webtoffee decorator, decorator – woocommerce email customizer +1 moreWordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
jqOSS-FuzzHeap-buffer-overflow in decToStringNo score- awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 moreWordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mike strand bulk comment removeWordPress Bulk Comment Remove Plugin <= 2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- stormhill media mybooktable bookstore by stormhill media, stormhillmedia mybook table bookstore +1 moreWordPress MyBookTable Bookstore Plugin <= 3.3.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- daext league tableWordPress League Table Plugin <= 1.13 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- finnj frontier postWordPress Frontier Post Plugin <= 6.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- trellix esm, enterprise security manager +1 moreAn Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to...8.4 High
- offshore web master availability calendarWordPress Availability Calendar Plugin <= 1.2.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- monsterinsights, monsterinsights pro +1 moreWordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- campaign monitor for wordpress, campaignmonitor campaign monitor +1 moreWordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)7.1 High
- getlasso simple urls, lasso simple urls – link cloaking, product displays, and affiliate link management +1 moreWordPress Simple URLs Plugin <= 118 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- team yoast yoast seo, yoast seo +1 moreWordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- evergreen content poster – auto post and schedule your best content to social media, evergreencontentposter evergreen content poster – auto post and schedule your best content to social media, evergreen content poster +2 moreWordPress Evergreen Content Poster Plugin <= 1.3.6.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- iqonic wp roadmap, iqonic design wp roadmap – product feedback board +1 moreWordPress WP Roadmap Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- laurence/ohmybox.info simple long formWordPress Simple Long Form Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- automattic jetpack, jetpack – wp security, backup, speed, & growth +1 moreWordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- elementor website builder, elementor.com elementor +1 moreWordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- automattic woocommerce, woocommerce blocks +1 moreWordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability6.5 Medium
- peepso community by peepso – social network, membership, registration, user profiles, peepso +1 moreWordPress Community by PeepSo Plugin <= 6.2.2.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- apache cocoonApache Cocoon's StreamGenerator is vulnerable to XXE injection9.8 Critical
- addonmaster bootstrap shortcodes ultimateWordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- duckdiverllc parallax imageWordPress Parallax Image Plugin <= 1.7.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- spreadsheetconverter import spreadsheets from microsoft excel, import spreadsheets +1 moreWordPress Import Spreadsheets from Microsoft Excel Plugin <= 10.1.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- edoc intelligence employee job application – best wordpress job manager for employees, edocintelligence employee job application +1 moreWordPress eDoc Employee Job Application Plugin <= 1.13 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pixelite events managerWordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- codebard fast custom social share by codebard, fast custom social share +1 moreWordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- cybernetikz easy social iconsWordPress Easy Social Icons Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…