CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- automattic woopayments, woopayments – fully integrated solution built and supported by woo +1 more WordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR) 5.9 Medium
- saleswonder webinarignition, saleswonder team webinar plugin: create live/evergreen/automated/instant webinars, stream & zoom meetings | webinarignition +1 more WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to SQL Injection 9.3 Critical
- mestres do wp checkout mestres wp WordPress Checkout Mestres WP Plugin <= 7.1.9.6 is vulnerable to SQL Injection 9.3 Critical
- wp zinc page generator WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injection 7.6 High
- wpmanageninja fluent support, wpmanageninja llc fluent support – wordpress helpdesk and customer support ticket plugin +1 more WordPress Fluent Support Plugin <= 1.7.6 is vulnerable to SQL Injection 7.6 High
- jewel theme wp adminify WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to SQL Injection 7.6 High
- whiletrue most and least read posts widget WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection 8.5 High
- eyal fitoussi geo my wordpress WordPress GEO my WordPress Plugin <= 4.0.2 is vulnerable to SQL Injection 7.6 High
- everestthemes everest backup – wordpress cloud backup, migration, restore & cloning plugin, everest backup +1 more WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure 5.3 Medium
- mtab bookmark MTab Bookmark Installation install.php access control 4.6 Medium
- s-cms S-CMS reg.php sql injection 5.5 Medium
- s-cms S-CMS sql injection 5.5 Medium
- s-cms S-CMS sql injection 5.5 Medium
- fahuo100 Shipping 100 Fahuo100 login.php sql injection 5.0 Medium
- totolink n350rt, n350rt firmware +1 more Totolink N350RT HTTP POST Request stack-based overflow 5.5 Medium
- 7-card fakabao 7-card Fakabao notify.php sql injection 5.5 Medium
- 7-card fakabao 7-card Fakabao wxpay_notify.php sql injection 5.5 Medium
- 7-card fakabao 7-card Fakabao notify.php sql injection 5.5 Medium
- 7-card fakabao 7-card Fakabao alipay_notify.php sql injection 5.5 Medium
- really simple plugins recipe maker for your food blog from zip recipes WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection 7.6 High
- yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 more WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection 9.1 Critical
- presslabs theme per user WordPress Theme per user Plugin <= 1.0.1 is vulnerable to PHP Object Injection 10.0 Critical
- crocoblock jetelements, jetelements for elementor +1 more WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE) 9.0 Critical
- moxa oncell g3150a-lte series, oncell g3150a-lte firmware +1 more OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials 5.3 Medium
- ari soft stream quiz – wordpress quizzes builder, ari-soft ari stream quiz +1 more WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection 9.9 Critical
- moxa oncell g3150a-lte series, oncell g3150a-lte firmware +1 more OnCell G3150A-LTE Series: Clickjacking Vulnerability 5.3 Medium
- carmelogarcia college notes gallery code-projects College Notes Gallery login.php sql injection 6.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 more Kernel: refcount leak in ctnetlink_create_conntrack() 5.5 Medium
-
libavcOSS-Fuzz Heap-buffer-overflow in ih264d_get_bits_h264 No score -
ntopngOSS-Fuzz Heap-buffer-overflow in IEC104Stats::processPacket No score -
libxml2OSS-Fuzz Heap-use-after-free in xmlRemoveID No score - tencent distributed sql Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database... 7.5 High
- bytecodealliance webassembly micro runtime Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can... 5.5 Medium
- royalapps royaltsx Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory... 7.8 High
- tecno-mobile camon x firmware Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to... 2.1 Low
- mdaemon securitygateway MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule.... 4.8 Medium
- cetic cetic-6lbr examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based... 7.5 High
- sympa Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not... 7.5 High
- coolkit ewelink, coolkit technology ewelink - smart home, ewelink-smart home +2 more Lockscreen bypass in eWeLink App 7.7 High
- dedebiz Muyun DedeBIZ Add Attachment unrestricted upload 4.7 Medium
- tongda oa 2017, tongda2000 office anywhere +1 more Tongda OA 2017 delete.php sql injection 5.5 Medium
- campcodes online college library system, online college library system project college library system +1 more Campcodes Online College Library System HTTP POST Request category_row.php sql injection 4.7 Medium
- campcodes online college library system, online college library system project college library system +1 more Campcodes Online College Library System HTTP POST Request book_row.php sql injection 4.7 Medium
- apache dolphinscheduler Apache DolphinScheduler: Arbitrary js execute as root for authenticated users 8.8 High
- campcodes online college library system, online college library system project college library system +1 more Campcodes Online College Library System HTTP POST Request book_add.php sql injection 4.7 Medium
- campcodes online college library system, online college library system project college library system +1 more Campcodes Online College Library System HTTP POST Request return_add.php sql injection 4.7 Medium
- campcodes online college library system Campcodes Online College Library System HTTP POST Request borrow_add.php sql injection 4.7 Medium
- phpgurukul hospital management system PHPGurukul Hospital Management System registration.php cross site scripting 4.3 Medium
- mdalamin-aol own health record, petrk94 ownhealthrecord +1 more MdAlAmin-aol Own Health Record logout.php cross-site request forgery 4.3 Medium
- phpgurukul hospital management system PHPGurukul Hospital Management System Admin Dashboard sql injection 7.3 High
- Show olderLoading…