CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- aweber, aweber – free sign up form and landing page builder plugin for lead generation and email newsletter growth +1 moreAWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection7.2 High
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreFluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting4.9 Medium
- wpwax product carousel slider & grid ultimate for woocommerce, product carosel slider \& grid ultimate, product carousel slider \& grid ultimate for woocommerce +2 moreProduct Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection7.5 High
- droitthemes droit elementor addons – widgets, blocks, templates library for elementor builderDroit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4 Medium
- cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 moreSMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request Forgery4.3 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpmudev hustle, hustle – email marketing, lead generation, optins, popups +1 moreHustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys8.6 High
- veronalabs wp statistics – simple, privacy-friendly google analytics alternativeWP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting7.2 High
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting5.4 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- hammadh play.ht, play.ht – make your blog posts accessible with text to speech audio +1 morePlay.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Cross-Site Request Forgery4.3 Medium
- brizy, themefusecom brizy – page builder, brizy brizy-page builder +2 moreBrizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.7.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag6.4 Medium
- wowdevs sky addons for elementor, sky addons – elementor addons with widgets & templates +1 moreSky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL6.4 Medium
- exclusiveaddons exclusive addons for elementorExclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget6.4 Medium
- properfraction paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress, profilepress +1 moreProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode6.4 Medium
- metagauss eventprime, eventprime – events calendar, bookings and tickets +1 moreEventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval4.3 Medium
- lifterlms, chrisbadgett lifterlms – wp lms for elearning, online courses, & quizzes +1 moreLifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review5.3 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- nmedia comments extra fields for post,pages and cpt, najeebmedia comments extra fields for post\, pages and cpt +1 moreComments Extra Fields For Post,Pages and CPT <= 5.0 - Missing Authorization4.3 Medium
- pawaryogesh1989 bulk edit post titlesBulk Edit Post Titles <= 5.0.0 - Missing Authorization via bulkUpdatePostTitles4.3 Medium
- crmperks database for contact form 7, wpforms, elementor formsDatabase for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode6.4 Medium
- icopydoc yml for yandex marketYML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting6.1 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget6.4 Medium
- autopolis bulgarisation for woocommerceBulgarisation for WooCommerce <= 3.0.14 - Missing Authorization7.3 High
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via form widget addr2_width attribute6.4 Medium
- storeapps news announcement scrollNews Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode8.8 High
- wpwax logo showcase ultimate – logo carousel, logo slider & logo grid, logo showcase ultimate +1 moreLogo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.3.8 - Authenticated(Contributor+) PHP Object Injection7.5 High
- kodezen academy lms, academy lms – wordpress lms plugin for complete elearning solution +1 moreAcademy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- blue coral chat bubble – floating chat with contact chat icons, messages, telegram, email, sms, call me back, bluecoral chat bubble +1 moreChat Bubble <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- wokamoto simple tweetSimple Tweet <= 1.4.0.2 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Audio Widget6.4 Medium
- miniorange page restriction, cyberlord92 page and post restriction +1 morePage Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass5.3 Medium
- duitku payment gateway, rayhanduitku duitku payment gateway +1 moreDuitku Payment Gateway <= 2.11.6 - Missing Authorization via check_duitku_response5.3 Medium
- gonahkar custom fields shortcodeCustom fields shortcode <= 0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode6.4 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget6.4 Medium
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- file manager pro, filemanagerpro.io file manager pro +1 moreFile Manager Pro <= 8.3.4 - Reflected Cross-Site Scripting6.1 Medium
- themeisle otter blocks, themisle otter blocks pro – gutenberg blocks, page builder for gutenberg editor & fse +1 moreOtter Blocks PRO <= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS6.4 Medium
- file manager pro, file manager project manager, filemanagerpro file manager pro +1 more +3 moreFile Manager And File Manager Pro (Multiple Versions) - Directory Traversal9.9 Critical
- wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget, post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup8.8 High
- nmedia comments extra fields for post,pages and cpt, najeebmedia comments extra fields for post\, pages and cpt +1 moreComments Extra Fields For Post,Pages and CPT <= 5.0 - Cross-Site Request Forgery4.3 Medium
- simple-membership-plugin simple membershipSimple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting4.7 Medium
- techearty easy accordion, shapedplugin easy accordion – responsive accordion faq builder and product faq +1 moreEasy Accordion – Best Accordion FAQ Plugin for WordPress <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- artibot, artibot free chat bot for websites +1 moreArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Missing Authorization to Settings Update5.0 Medium
- hammadh play.ht, play.ht – make your blog posts accessible with text to speech audio, pay.ht make your blog posts accessible with text to speech audio +2 morePlay.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Authenticated (Contributor+) PHP Object Injection8.8 High
- geminilabs site reviewsSite Reviews <= 6.11.4 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name6.4 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table6.4 Medium
- Show moreLoading…