CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- red hat enterprise linux 8, enterprise linux 9 +1 moreOsbuild-composer: race condition may disable gpg verification for package repositories6.1 Medium
- gemini labs site reviewsWordPress Site Reviews plugin <= 6.11.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- matt manning mjm clinicWordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pickplugins user profileWordPress User profile plugin <= 2.0.20 - Subscriber+ Stored Cross Site Scripting (XSS) vulnerability6.3 Medium
- calameo wp calameoWordPress WP Calameo plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- evergreen content poster content poster, evergreencontentposter evergreen content poster +1 moreWordPress Evergreen Content Poster plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- opentext asset management x (amx), service management automation x (smax), opentext™ hybrid cloud management x (hcmx) +2 moreA potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products.6.5 Medium
- opentext asset management x (amx), service management automation x (smax) +1 morePotential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.6.5 Medium
- jegtheme jeg elementor kitWordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hasthemes extensions for cf7WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability7.1 High
- ninjateam database for contact form 7WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability7.1 High
- zimma ltd. ticket tailorWordPress Ticket Tailor plugin <= 1.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- damian wp popupsWordPress WP Popups – WordPress Popup builder plugin <= 2.1.5.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webtechstreet elementor addon elementsWordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- leevio happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- python cpythonQuoted zip-bomb protection for zipfile6.2 Medium
- 3uu shariff wrapperWordPress Shariff Wrapper plugin <= 4.6.10 - Contributor+ Cross Site Scripting (XSS) vulnerability6.5 Medium
- pauple table & contact form 7 database – tablesomeWordPress Tablesome plugin <= 1.0.27 - Cross Site Scripting (XSS) vulnerability7.1 High
- webvitaly sitekitWordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aukejomm woocommerce google feed managerWordPress WooCommerce Google Feed Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bdtask wholesale inventory management system, multi store inventory management system +1 moreBdtask Wholesale Inventory Management System session fixiation4.3 Medium
- codename065 download managerWordPress Download Manager plugin <= 3.2.84 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- zaytech smart online order for cloverWordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- iconicwp woothumbs for woocommerce by iconicWordPress WooThumbs for WooCommerce by Iconic plugin <= 5.5.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cimatti wordpress contact forms, cimatti consulting contact forms by cimatti +1 moreWordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability7.1 High
- scrollsequenceWordPress Scrollsequence plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- firassaidi woocommerce license managerWordPress WooCommerce License Manager plugin <= 5.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- foliovision: making the web work for you fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreWordPress FV Player plugin <= 7.5.41.7212 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- awplife profile box shortcode and widgetProfile Box Shortcode And Widget < 1.2.1 Admin+ Stored XSS4.8 Medium
- aam advanced access managerWordPress Advanced Access Manager plugin <= 6.9.20 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- elliot sowersby / relywp coupon affiliatesWordPress Coupon Affiliates plugin <= 5.12.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- giuse specific content for mobile – customize the mobile version without redirectionsWordPress Specific Content For Mobile plugin <= 0.1.9.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- aam advanced access managerWordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- post smtp smtp, saad iqbal post smtp +1 moreWordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- oxyextrasWordPress OxyExtras plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- scott paterson contact form 7 – paypal & stripe add-on, wpplugin paypal \& stripe add-on +1 moreWordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themefic tourficWordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themefic tourficWordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability9.9 Critical
- themefic tourficWordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability8.5 High
- themefic tourficWordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dev institute restrict user access – membership plugin with force, dev.institute restrict user access +1 moreWordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mark tilly mycurator content curationWordPress MyCurator Content Curation plugin <= 3.76 - Cross Site Scripting (XSS) vulnerability7.1 High
- matt manning mjm clinicWordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pdf embedder embedderWordPress PDF Embedder plugin <= 4.6.4 - Cross Site Scripting (XSS) vulnerability5.5 Medium
- webberzone better search – relevant search results for wordpress, better search +1 moreWordPress Better Search plugin <= 3.3.0 - Stored Cross Site Scripting (XSS) vulnerability7.1 High
- cozmoslabs, sareiodata passwordless loginWordPress Passwordless Login plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cegid meta4 hrMultiple vulnerabilities on Meta4 HR from Cegid9.0 Critical
- Show moreLoading…