CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- repute infosystems bookingpress – appointment booking calendar plugin and online scheduling plugin, reputeinfosystems bookingpress +1 moreWordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection8.5 High
- matthew fries mf gig calendar, mf gig calendar project gig calendar +1 moreWordPress MF Gig Calendar Plugin <= 1.2.1 is vulnerable to SQL Injection8.5 High
- clockwork sms notfications, mediaburst clockwork sms notfications +1 moreWordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection7.6 High
- james ward mail logging – wp mail catcher, jamesward wp mail catcher +1 moreWordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection7.6 High
- ayecode geodirectory, ayecode - wordpress business directory plugins geodirectory – wordpress business directory plugin, or classified directory +1 moreWordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection7.6 High
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login, registrationmagic – custom registration forms, user registration, payment, and user login +2 moreWordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection7.6 High
- collne inc. welcart e-commerce, welcart e-commerce +1 moreWordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection7.6 High
- ruoyiy_project RuoYi HTTP POST Request login cross site scripting4.3 Medium
- carmelogarcia intern membership management systemcode-projects Intern Membership Management System User Registration cross site scripting3.5 Low
- latchset jwcrypto, fedoraproject fedora, red hat ansible automation platform 2 +7 more +9 moreJwcrypto: denail of service via specifically crafted jwe5.3 Medium
- carmelogarcia intern membership management systemcode-projects Intern Membership Management System User Registration sql injection6.3 Medium
- lycheeorg lycheeLychee is vulnerable to an SQL Injection in explain DB queries.8.8 High
- d-link d-view 8D-Link D-View 8 Unauthenticated Probe-Core Server Communication10.0 Critical
- ewen-lbh ffcss, firefox css +1 moreewen-lbh/ffcss late-Unicode normalization vulnerability5.3 Medium
- code-projects voting systemcode-projects Voting System Voters Login sql injection5.5 Medium
- kriszyp msgpackrConversion of property names to strings can trigger infinite recursion6.8 Medium
- metersphereMeterSphere horizontal privilege escalation vulnerability of resources in project scope.4.3 Medium
- code-projects voting systemcode-projects Voting System Admin Login sql injection6.3 Medium
- code-projects automated voting systemcode-projects Automated Voting System Login sql injection6.3 Medium
- code-projects automated voting systemcode-projects Automated Voting System Admin Login sql injection6.3 Medium
- aaron j 404 solutionWordPress 404 Solution Plugin <= 2.34.0 is vulnerable to SQL Injection7.6 High
- e2pdf, e2pdf.com e2pdf – export to pdf tool for wordpress +1 moreWordPress e2pdf Plugin <= 1.20.23 is vulnerable to SQL Injection7.6 High
- stellarwp booking calendar | appointment booking | bookit, stylemixthemes bookit +1 moreWordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL Injection7.6 High
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments +1 moreWordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection7.6 High
- advancedformintegration advanced form integration, nasirahmed advanced form integration – connect woocommerce and contact form 7 to google sheets and other platforms +1 moreWordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.75.0 is vulnerable to SQL Injection7.6 High
- squirrly seo - advanced pack, seo plugin by squirrly seo +1 moreWordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection7.6 High
- sam perrow pre* party resource hints, samperrow pre party resource hints +1 moreWordPress Pre* Party Resource Hints Plugin <= 1.8.18 is vulnerable to SQL Injection7.6 High
- funnelkit funnel builder for wordpress by funnelkit – customize woocommerce checkout pages, create sales funnels & maximize profits, funnel builder +1 moreWordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection7.6 High
- funnelkit recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, automations +1 moreWordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection7.6 High
- mostafas1990 wp sms – messaging & sms notification for wordpress, woocommerce, gravityforms, etc, veronalabs wp sms +1 moreWordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure5.3 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection7.5 High
- woocommerce product add-ons, product addons +1 moreWordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to PHP Object Injection8.2 High
- gesundheit bewegt gmbh zippyWordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection6.6 Medium
- bill minozzi disable json api, login lockdown, xmlrpc, pingback, stop user enumeration anti hacker scan, billminozzi anti hacker +1 moreWordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- infolific add any extension to pagesWordPress Add Any Extension to Pages Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- ibericode html formsWordPress HTML Forms Plugin <= 1.3.28 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia +1 moreWordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- connekthq ajax load more, darren cooney wordpress infinite scroll – ajax load more +1 moreWordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- undsgn uncode, uncode - creative & woocommerce wordpress theme +1 moreWordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- talent software ecopXSS in Talent Soft's ECOP6.1 Medium
- talent software ecopSQLi in Talent Soft's ECOP9.8 Critical
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch Agent as a Windows service is vulnerable to a Denial of Service6.2 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to sensitive information disclosure4.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf7.0 High
- code-projects e-commerce sitecode-projects E-Commerce Site search.php cross site scripting4.3 Medium
libxml2OSS-FuzzHeap-use-after-free in xmlStaticCopyNodeNo scorendpiOSS-FuzzHeap-buffer-overflow in processClientServerHelloNo score- cybergarage mupnp for cmupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash...7.5 High
- qd-metro qingdao metroAn issue in the export component AdSdkH5Activity of com.sdjictec.qdmetro v4.2.2 allows attackers...5.3 Medium
- Show moreLoading…