CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- getgrav gravServer-Side Template Injection (SSTI) with Grav CMS security sandbox bypass8.8 High
- getgrav gravGrav File Upload Path Traversal vulnerability8.8 High
- campcodes complete online beauty parlor management system, complete online beauty parlor management system project online beauty parlor management system +1 moreCampcodes Complete Online Beauty Parlor Management System edit-services.php sql injection6.3 Medium
- campcodes complete online beauty parlor management systemCampcodes Complete Online Beauty Parlor Management System forgot-password.php sql injection6.3 Medium
- campcodes complete online beauty parlor management systemCampcodes Complete Online Beauty Parlor Management System index.php sql injection6.3 Medium
- tenda ac10u, ac10u firmware +1 moreTenda AC10U SetPptpServerCfg formSetPPTPServer stack-based overflow8.8 High
- tenda ac10u, ac10u firmware +1 moreTenda AC10U setcfm formSetCfm stack-based overflow8.8 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreCSRF Vulnerability in gradio-app/gradio4.3 Medium
- bdthemes prime slider – addons for elementor, prime slider +1 moreWordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability4.3 Medium
- joomunited wp media folderWordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerability5.4 Medium
- mark stockton quicksand post filter jquery pluginWordPress Quicksand Post Filter jQuery plugin <= 3.1.1 - Broken Access Control vulnerability5.3 Medium
- yith woocommerce gift cards premiumWordPress YITH WooCommerce Gift Cards Premium plugin <= 3.23.1 - Unauth. Gift Card Creation Leading to Stored XSS vulnerability6.5 Medium
- junkcoder, ristoniinemets ajax thumbnail rebuildWordPress AJAX Thumbnail Rebuild plugin <= 1.13 - Broken Access Control vulnerability4.3 Medium
- joomunited wp media folderWordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerability4.3 Medium
- skymoonlabs movetoWordPress MoveTo plugin <= 6.2 - Unauthenticated Arbitrary WordPress Settings Change vulnerability9.8 Critical
- peach payments gateway, peachpayments peach payments gateway +1 moreWordPress Peach Payments Gateway plugin <= 3.1.9 - Broken Access Control vulnerability5.4 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability4.3 Medium
- funnelkit checkoutWordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerability7.5 High
- wp swings points and rewards for woocommerceWordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability5.4 Medium
- melapress wp 2faWordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability5.3 Medium
- ibm storage protect plus server, storage protect plus +1 moreIBM Storage Protect Plus Server information disclosure6.2 Medium
- dartiss code embedWordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability6.5 Medium
- jean-david daviet download mediaWordPress Download Media plugin <= 1.4.2 - Broken Access Control vulnerability4.3 Medium
- valvepress automatic, wordpress automatic plugin +1 moreWordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability9.9 Critical
- optimole super page cache for cloudflare, super page cache +1 moreWordPress Super Page Cache for Cloudflare plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability7.1 High
- wow-company wp coderWordPress WP Coder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- data443 tracking code managerWordPress Tracking Code Manager plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- funnelkit automation by autonamiWordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webpack webpack-dev-middlewarewebpack-dev-middleware Path Traversal vulnerability7.4 High
- fkrauthan wp-mpdfWordPress wp-mpdf plugin <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- crispWordPress Crisp – Live Chat and Chatbot plugin <= 0.44 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gesundheit bewegt gmbh zippyWordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerability8.8 High
- getwpfunnels wpfunnelsWordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
grub2-commonTuxCare,grub2-efi-ia32TuxCare,grub2-efi-ia32-cdbootTuxCare +10 more +12 moreUpdate of grub2No score- esphomeESPHome vulnerable to Authentication bypass via Cross site request forgery8.1 High
grub2-commonTuxCare,grub2-efi-ia32TuxCare,grub2-efi-ia32-cdbootTuxCare +10 more +12 moreUpdate of grub2No score- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- dsgvo-for-wp dsgvo all in one for wpWordPress DSGVO All in one for WP plugin <= 4.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wp enhanced free downloads woocommerceWordPress Free Downloads WooCommerce plugin <= 3.5.8.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bogdanfix wp sendfoxWordPress WP SendFox plugin <= 1.3.0 - Broken Access Control vulnerability5.4 Medium
- property hive propertyhiveWordPress PropertyHive plugin <= 2.0.9 - PHP Object Injection vulnerability5.4 Medium
- wen themes responsive columnsWordPress WEN Responsive Columns plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- i thirteen web solution wp responsive tabs horizontal vertical and accordion tabsWordPress WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.17 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- lvaudore the moneytizer, the moneytizer moneytizer +1 moreWordPress The Moneytizer plugin <= 9.5.20 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- psm plugins supportcandyWordPress SupportCandy plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- link whisper free, unknown link whisper free +1 moreWordPress Link Whisper Free plugin <= 0.6.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- typps calendarista basic editionWordPress Calendarista Basic Edition plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- yith woocommerce product add-ons, yithemes yith woocommerce product add-ons +1 moreWordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 moreWordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- cdexOpen redirection in CDeX7.1 High
- Show moreLoading…