CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- conversios, conversios google analytics integration for woocommerce, tatvic conversios: google analytics (ga4), google ads, conversion and analytics tracking for multi-channels +2 moreConversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection8.8 High
- comesio relevanssi – a better search, relevanssi, relevanssi premium +1 more +3 moreRelevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export5.3 Medium
- codename065 download managerDownload Manager <= 3.2.84 - Missing Authorization5.3 Medium
- themeisle otter blocks, themisle otter blocks pro – gutenberg blocks, page builder for gutenberg editor & fse +1 moreOtter Blocks PRO <= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG Upload6.1 Medium
- kbjohnson90 user shortcodes plusUser Shortcodes Plus <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via user_meta Shortcode4.3 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass5.3 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets6.4 Medium
- exclusiveaddons exclusive addons for elementorExclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget6.4 Medium
- edge22 wp show postsWP Show Posts <= 1.1.4 - Information Exposure5.3 Medium
- wpchill simple restrictSimple Restrict <= 1.2.6 - Missing Authorization to Sensitive Information Exposure5.3 Medium
- cyberlord92 malware scanner, miniorange web application firewall, cyberlord92 web application firewall – website security +2 moreMalware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation9.8 Critical
- themegrill maintenance pageMaintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API5.3 Medium
- edge22 generateblocksGenerateBlocks <= 1.8.2 - Sensitive Information Exposure4.3 Medium
- pixelite events manager, netweblogic events manager – calendar, bookings, tickets, and more! +1 moreEvents Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings4.4 Medium
- visual composer website builder, visualcomposer visual composer website builder +1 moreVisual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- barrykooij related posts for wordpress, never5 related posts +1 moreRelated Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery5.4 Medium
- codename065 download managerDownload Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- brizy, themefusecom brizy – page builder +1 moreBrizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- tms-outsource wpdatatables, wpdatatables – wordpress data table, dynamic tables & table charts plugin +1 morewpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.6.1 Medium
- properfraction paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress, profilepress +1 morePaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via [reg-sele…6.4 Medium
- hammadh play.ht, play.ht – make your blog posts accessible with text to speech audio +1 morePlay.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization5.4 Medium
- roxnor wp social login and register social counterWp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status Update6.5 Medium
- wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 moreWP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin6.1 Medium
- bitapps contact form builder, bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder +1 moreContact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration5.3 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet6.4 Medium
- codepeople calculated fields formCalculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting7.2 High
- brizy, themefusecom brizy – page builder +1 moreBrizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- artibot, artibot free chat bot for websites +1 moreArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Authenticated (Admin+) Cross-Site Scripting4.4 Medium
- ameliabooking booking for appointments and events calendar – amelia, tmsproducts amelia +1 moreBooking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting6.1 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export4.3 Medium
- renventura woocommerce add to cart custom redirect, forwardflip add to cart custom redirect for woocommerce +1 moreWooCommerce Add to Cart Custom Redirect <= 1.2.13 - Authenticated(Contributor+) Missing Authorization to Limited Arbitrary Options Update8.1 High
- properfraction paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress, profilepress +1 moreProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- mainwp dashboard, dashboard: self-hosted wordpress management for agencies +1 moreMainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk4.3 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget6.4 Medium
- rafflepress, smub giveaways and contests by rafflepress – get more website traffic, email subscribers, and social followers +1 moreGiveaways and Contests by RafflePress <= 1.12.5 - Unauthenticated Stored Cross-Site Scripting7.2 High
- wpvivid backup for mainwp, wpvividplugins wpvivid backup for mainwp +1 moreWPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting6.1 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreMasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route5.3 Medium
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget5.4 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link Wrapper6.4 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements), anywhere elementor +2 moreElementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion8.8 High
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- themegrill maintenance pageMaintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure5.3 Medium
- feedwordpress project feedwordpressFeedWordPress <= 2022.0222 - Insecure Direct Object Referece5.3 Medium
- exclusiveaddons exclusive addons for elementorExclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- frenify categorify, categorify – wordpress media library category & file manager +1 moreCategorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxAddCategory4.3 Medium
- standalonetech terawallet, subratamal wallet for woocommerce +1 moreTeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscriber+) User Email Export4.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar7.4 High
- svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms +1 morePost Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization4.3 Medium
- flamescorpion auto affiliate linksAuto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink4.3 Medium
- Show moreLoading…