CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- theresehansen commenttweetsCommentTweets <= 0.6 - Settings Update via CSRF8.8 High
- codexonics prime mover, unknown migrate wordpress website & backups +1 morePrime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure7.5 High
- backupbliss cloneClone < 2.4.3 - Unauthenticated Backup Download7.5 High
- unknown wp custom cursors | wordpress cursor plugin, hamidrezasepehr wp custom cursors \| wordpress cursor plugin +1 moreWP Custom Cursors <= 3.2 - Admin+ Stored XSS4.8 Medium
- g5plus essential real estateEssential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload8.8 High
- kutethemes ovic responsive wpbakeryOvic Responsive WPBakery < 1.2.9 - Subscriber+ Option Update8.8 High
- g5plus essential real estateEssential Real Estate < 4.4.0 - Subscriber+ Stored XSS5.4 Medium
- revolution slider slider revolutionSlider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE8.8 High
- bowo debug log managerDebug Log Manager < 2.3.0 - Sensitive Logs Exposure7.5 High
- awesomemotive duplicatorDuplicator < 1.3.0 - Unauthenticated RCE9.8 Critical
- unknown ni purchase order(po) for woocommerce, naziinfotech ni purchase order\(po\) for woocommerce +1 moreNi Purchase Order(PO) For WooCommerce <= 1.2.1 - Admin+ File Upload to Remote Code Execution7.2 High
- g5plus essential real estateEssential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update6.5 Medium
- codecabin wp go maps, unknown wp go maps (formerly wp google maps) +1 moreWP Go Maps < 9.0.28 - Unauthenticated Stored XSS6.1 Medium
- jetmonsters getwidGetwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin7.5 High
- i13websolution email subscription popupEmail Subscription Popup < 1.2.20 - Reflected XSS6.1 Medium
- themeum wp crowdfundingWP Crowdfunding < 2.1.9 - Reflected XSS6.1 Medium
- rextheme wp vrWP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS6.1 Medium
- constant contact forms, constantcontact constant contact forms +1 moreWordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure5.3 Medium
- automattic woocommerceWordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
clamavUbuntuclamav updateNo score- ukrsolution simple inventory management – just scan barcode to manage products and orders. for woocommerce, barcode scanner and inventory manager +1 moreWordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection9.3 Critical
- anton bond woocommerce tranzila payment gatewayWordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection10.0 Critical
- gecka terms thumbnailsWordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object Injection9.9 Critical
- tagbox – ugc galleries, social media widgets, user reviews & analytics, taggbox +1 moreWordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection10.0 Critical
- mapster wp mapsWordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- laybuy payment extension for woocommerceWordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting, wedevs wp erp +1 moreWordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection7.6 High
github.com/cloudflare/circlGoCIRCL's Kyber: timing side-channel (kyberslash2)No score- xwiki, xwiki xwiki-platform +1 moreXWiki Denial of Service attack through attachments7.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki has no right protection on rollback action8.0 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Remote Code Execution vulnerability via user registration10.0 Critical
- gtkwaveAn integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of...7.0 High
- gtkwaveMultiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality...7.8 High
- gtkwaveMultiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality...7.8 High
- gtkwaveMultiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality...7.8 High
- gtkwaveMultiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave...7.8 High
- gtkwaveMultiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA...7.8 High
- gtkwaveMultiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA...7.8 High
- gtkwaveMultiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA...7.8 High
- gtkwaveMultiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA...7.8 High
- gtkwaveMultiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table...7.8 High
- gtkwaveMultiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave...7.8 High
- gtkwaveMultiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave...7.8 High
- gtkwaveMultiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave...7.8 High
- gtkwaveMultiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave...7.8 High
- gtkwaveMultiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave...7.8 High
- gtkwaveAn integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation...7.0 High
- gtkwaveMultiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table...7.8 High
- gtkwaveMultiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta...7.8 High
- gtkwaveMultiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta...7.8 High
- Show moreLoading…