CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- progress whatsup goldWhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert Center7.6 High
- progress whatsup goldWhatsUp Gold Stored Cross-Site Scripting (XSS) via Device Groups7.6 High
- progress whatsup goldWhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboard7.6 High
- dell vapp manager, powermax os, solutions enabler virtual appliance +1 more +3 moreDell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote...7.2 High
- dell vapp manager, powermax os, solutions enabler virtual appliance +1 more +3 moreDell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote...7.2 High
- fancythemes optin forms – simple list building plugin for wordpress, optin forms +1 moreWordPress Optin Forms Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dell vapp manager, powermax os, solutions enabler virtual appliance +1 more +3 moreDell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A...4.9 Medium
- gordon böhme, antonio leutsch structured content (json-ld) #wpsc, wpsc-plugin structured content +1 moreWordPress Structured Content Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dell vapp manger, powermax os, solutions enabler virtual appliance +1 more +3 moreDell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A...7.5 High
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)7.1 High
- peter raschendorfer smart external link click monitor [link log], petersplugins link log +1 moreWordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- dell powerprotect dd, powerprotect data domain management center +1 moreDell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on...8.2 High
- peter raschendorfer smart external link click monitor [link log], petersplugins smart external link click monitor \[link log\] +1 moreWordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- themefic ultimate addons for contact form 7WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- dell powerprotect dd, apex protection storage, emc data domain os +3 more +5 moreDell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110...7.2 High
- kyle phillips nested pagesWordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dell powerprotect dd, apex protection storage, emc data domain os +3 more +5 moreDell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110...8.8 High
- 10to8 sign in scheduling online appointment booking systemWordPress 10to8 Online Appointment Booking System Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dell powerprotect dd, apex protection storage, emc data domain os +3 more +5 moreDell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110...7.8 High
- braincert – html5 virtual classroom, virtual classroom api +1 moreWordPress BrainCert – HTML5 Virtual Classroom Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)7.1 High
- theinnovs innovs hr – complete human resource management system for your business, innovs hr +1 moreWordPress Innovs HR Plugin <= 1.0.3.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- dell powerprotect dd, apex protection storage, emc data domain os +3 more +5 moreDell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110...4.3 Medium
- dell powerprotect dd, apex protection storage, emc data domain os +3 more +5 moreDell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110...6.7 Medium
- dell powerprotect dd, apex protection storage, emc data domain os +3 more +5 moreDell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 ...6.7 Medium
- dell powerprotect dd, apex protection storage, emc data domain os +3 more +5 moreDell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110...7.8 High
- wordplus better messages – live chat for wordpress, buddypress, peepso, ultimate member, buddyboss, better messages +1 moreWordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- aleksandar urošević stock tickerWordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ideabox creations powerpack pro for elementor, ideabox powerpack addons for elementor +1 moreWordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- s-sols seraphinite accelerator, seraphinite solutions accelerator +1 moreWordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)7.1 High
- jeff starr dashboard widgets suite, plugin-planet dashboard widget suite +1 moreWordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- pencidesign soledad, soledad – multipurpose, newspaper, blog & woocommerce wordpress theme +1 moreWordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- automattic woopayments, woopayments – fully integrated solution built and supported by woo +1 moreWordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- brainstorm force spectra – wordpress gutenberg blocks, brainstormforce spectra +1 moreWordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- brontobytes cookie barWordPress Cookie Bar Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- beckhoff authelia-bhf, authelia-bhf of twincat/bsd +1 moreBeckhoff: Open redirect in TwinCAT/BSD package authelia-bhf4.7 Medium
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +14 more +16 morePHOENIX CONTACT: PLCnext Control prone to download of code without integrity check6.5 Medium
- paul bearne author avatars list/block, bearne author avatars list\/block +1 moreWordPress Author Avatars List/Block Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- phoenix contact automation worx software suite, axc 1050, axc 1050 xc +30 more +32 morePhoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC7.5 High
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +14 more +16 morePHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control8.8 High
- phoenix contact automation worx software suite, axc 1050, axc 1050 xc +30 more +32 morePhoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource9.8 Critical
- phoenix contact multiprog, proconos eclr (sdk), phoenixcontact proconos eclr +2 morePhoenix Contact: ProConOs prone to Download of Code Without Integrity Check7.5 High
- ibm i access client solutionsIBM i Access Client Solutions code execution7.4 High
- phoenix contact multiprog, proconos eclr (sdk), phoenixcontact proconos eclr +2 morePhoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource9.8 Critical
- ibm i access client solutionsIBM i Access Client Solutions information disclosure7.4 High
- twinpictures annual archiveWordPress Annual Archive Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- averta shortcodes and extra features for phlox themeWordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- alma – pay in installments or later for woocommerce, almapay alma +1 moreWordPress Alma – Pay in installments or later for WooCommerce Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- livemesh wpbakery page builder addons by livemesh, livemeshthemes wpbakery page builder addons +1 moreWordPress Livemesh Addons for WPBakery Page Builder Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- acronis cyber protect cloud agent, agent +1 moreSensitive information disclosure and manipulation due to missing authorization. The following...3.3 Low
- Show moreLoading…