CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- No product listed wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scripting 3.5 Low
- redlettuce pdf viewer for elementor WordPress PDF Viewer for Elementor plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- noah kagan underconstruction WordPress underConstruction plugin <= 1.21 - Cross Site Scripting (XSS) vulnerability 5.9 Medium
- cimatti contact forms by cimatti, wordpress contact forms +1 more WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability 5.9 Medium
- wpdevart gallery, responsive image gallery, gallery album +1 more WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- toast plugins sticky anything WordPress Sticky Anything plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability 7.1 High
- wppdf.org responsive flipbook WordPress Responsive flipbook plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- joby joseph wp twitter mega fan box widget WordPress WP Twitter Mega Fan Box Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability 5.9 Medium
- wouter dijkstra dd rating WordPress DD Rating plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability 5.9 Medium
- sayan datta ultimate social comments – email notification & lazy load WordPress Ultimate Social Comments plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- mightythemes mighty classic pros and cons WordPress Mighty Classic Pros And Cons plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- aesopinteractive aesop story engine WordPress Aesop Story Engine plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- michael simpson add shortcodes actions and filters WordPress Add Shortcodes Actions And Filters plugin <= 2.10 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- maurice spin 360 deg and 3d model viewer WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- scientech it solution appointment calendar WordPress Appointment Calendar plugin <= 2.9.6 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- pulsar web design weekly class schedule WordPress Weekly Class Schedule plugin <= 3.19 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- rob marsh, sj post-plugin library WordPress Post-Plugin Library plugin <= 2.6.2.1 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- joel starnes pagemash > page management WordPress pageMash plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability 7.1 High
- techblissonline.com (rajesh) platinum seo WordPress Platinum SEO plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability 5.9 Medium
- 荒野无灯 hacklog down as pdf WordPress Hacklog Down As PDF plugin <= 2.3.6 - Cross Site Scripting (XSS) vulnerability 7.1 High
- sparkweb interactive, inc. custom field bulk editor WordPress Custom Field Bulk Editor plugin <= 1.9.1 - Cross Site Scripting vulnerability 7.1 High
- philip m. hofer (frumph) comic easel WordPress Comic Easel plugin <= 1.15 - Cross Site Scripting (XSS) vulnerability 7.1 High
- stephan spencer seo title tag WordPress SEO Title Tag plugin <= 3.5.9 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- august infotech ai twitter feeds (twitter widget & shortcode) WordPress AI Twitter Feeds (Twitter widget & shortcode) plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- scimone ignazio prenotazioni WordPress Prenotazioni plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability 5.9 Medium
- kanban for wordpress boards for wordpress WordPress Kanban Boards for WordPress plugin <= 2.5.21 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- getresponse for wordpress, unknown getresponse for wordpress +1 more WordPress GetResponse for WordPress plugin <= 5.5.33 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- yooslider yoo slider WordPress Yoo Slider – Image Slider & Video Slider plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- diso development team openid WordPress OpenID plugin <= 3.6.1 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- iflychat, iflychat team – wordpress chat +1 more WordPress iFlyChat plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- katz web services, inc. contact form 7 newsletter WordPress Contact Form 7 Newsletter plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability 7.1 High
- stephanie leary convert post types WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- moises heberle woocommerce bookings calendar WordPress WooCommerce Bookings Calendar plugin <= 1.0.36 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- wpdevart gallery, responsive image gallery, gallery album +1 more WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- wp site care heartthis WordPress HeartThis plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- prism it systems user rights access manager WordPress User Rights Access Manager plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability 5.8 Medium
- webdorado spiderfaq WordPress SpiderFAQ plugin <= 1.3.2 - Cross Site Scripting vulnerability 7.1 High
- easy social feed social feed, easysocialfeed easy social feed +1 more WordPress Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin <= 6.5.6 - Cross Site Request Forgery (CSRF) vulnerability 4.3 Medium
- wpfactory slugs manager WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability 4.3 Medium
- lws optimize WordPress LWS Optimize plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability 4.3 Medium
- kopatheme nictitate WordPress Nictitate theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability 4.3 Medium
- festi-team popup cart lite for woocommerce WordPress Popup Cart Lite for WooCommerce plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability 5.4 Medium
- upqode whizzy WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability 6.5 Medium
- ricard torres thumbs rating WordPress Thumbs Rating plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability 5.3 Medium
- loopus wp cost estimation & payment forms builder WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - SQL Injection vulnerability 8.5 High
- hassantafreshi easy form builder WordPress Easy Form Builder plugin <= 3.7.4 - SQL Injection vulnerability 8.5 High
- 10web map builder for google maps WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability 7.6 High
- paid memberships pro – mailchimp add on WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability 5.3 Medium
- giraphix creative layouts for elementor WordPress Layouts for Elementor plugin < 1.8 - Arbitrary File Upload vulnerability 7.5 High
- Show olderLoading…