CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- perfmattersWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- nitin rathod wp forms puzzle captchaWordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to XSS7.1 High
- imagely nextgen gallery, wordpress gallery plugin – nextgen gallery +1 moreWordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wap nepal delete post revisions in wordpress, wapnepal delete post revisions +1 moreWordPress Delete Post Revisions In WordPress Plugin <= 4.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- business directory team directory plugin – easy listing directories for wordpress, businessdirectoryplugin business directory, strategy11team business directory plugin – easy listing directories for wordpress +2 moreWordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- bamboo mcr columnsWordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- powr contact form – custom builder, payment form, and more, pack +1 moreWordPress Powr Pack Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- servit affiliate-toolkit, servit software solutions affiliate-toolkit – wordpress affiliate plugin +1 moreWordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- amitzy molongui, molongui author box, guest author and co-authors for your posts – molongui +1 moreWordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- libsyn publisher hubWordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure5.3 Medium
- gesundheit bewegt gmbh zippyWordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure6.5 Medium
- repute infosystems bookingpress – appointment booking calendar plugin and online scheduling plugin, reputeinfosystems bookingpress +1 moreWordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure5.3 Medium
- gopi ramasamy email download linkWordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure5.3 Medium
- leap13 premium addons pro, premium addons, premium addons pro +2 moreWordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure6.5 Medium
- joedolson my calendarThe 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL...8.6 High
- cagdasdag kb support – wordpress help desk and knowledge base, logon kb support +1 moreWordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control4.3 Medium
- multivendorx product stock manager & notifier for woocommerce, product stock manager \& notifier for woocommerce +1 moreWordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure5.3 Medium
- pickplugins post grid combo – 36+ gutenberg blocks, post grid combo +1 moreWordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure7.5 High
- ewww image optimizer, exactly www ewww image optimizer +1 moreWordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure5.3 Medium
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System add-phlebotomist.php sql injection6.3 Medium
- followmedarling cookies and content security policyWordPress Cookies and Content Security Policy Plugin <= 2.15 is vulnerable to Sensitive Data Exposure5.3 Medium
- gopi ramasamy email posts to subscribersWordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure5.3 Medium
- profilepress membership team paid membership plugin, ecommerce, registration form, login form, user profile & restrict content – profilepress, properfraction profilepress, profilepress user registration\, login form\, user profile \& membership +2 moreWordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure7.5 High
- smackcoders export all posts, products, orders, refunds & users, export all posts\, products\, orders\, refunds \& users +1 moreWordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure5.9 Medium
- libsyn publisher hubWordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure5.3 Medium
- iulia cazan image regenerate & select crop, iuliacazan image regenerate \& select crop +1 moreWordPress Image Regenerate & Select Crop Plugin <= 7.3.0 is vulnerable to Sensitive Data Exposure5.3 Medium
- notepad++, notepad-plus-plus notepad\+\+ +1 moreNotePad++ dbghelp.exe uncontrolled search path5.3 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreWordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure6.5 Medium
- bowo debug log managerWordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure5.3 Medium
- dashlabsltd yasr – yet another star rating plugin for wordpress, yet another stars rating project another stars rating +1 moreWordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition3.7 Low
- licensemanager license manager for woocommerceWordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection7.6 High
- really simple plugins complianz, complianz premium +1 moreWordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)7.1 High
- bigprof online invoicing system, online inventory manager +1 moreCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing system, online inventory manager +1 moreCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing system, online inventory manager +1 moreCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing system, online inventory manager +1 moreCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing system, online inventory manager +1 moreCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing system, online inventory manager +1 moreCross-site Scripting vulnerability in BigProf products6.3 Medium
- really simple plugins complianz, complianz premium +1 moreWordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)6.5 Medium
- bigprof online invoicing systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online invoicing systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online clinic management systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online clinic management systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online clinic management systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- bigprof online clinic management systemCross-site Scripting vulnerability in BigProf products6.3 Medium
- brainstorm force us llc schema pro, brainstormforce schema +1 moreWordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- brainstorm force us llc cartflows pro, brainstormforce cartflows, cartflows pro +2 moreWordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- elijaa phpmemcachedadminCross-site Scripting vulnerability in PHPMemcachedAdmin6.1 Medium
- Show moreLoading…