CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- wc lovers wcfm – frontend manager for woocommerceWordPress WCFM plugin <= 6.7.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- codesupplyco networker - tech news wordpress theme with dark mode, networker technews wordpress theme with dark mode +1 moreNetworker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization5.3 Medium
- curl, curl libcurl, apple macos +10 more +12 moreTLS certificate check bypass with mbedTLS6.5 Medium
- curl, apple macos, netapp active iq unified manager +14 more +16 moreQUIC certificate check bypass with wolfSSL6.3 Medium
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx6.5 Medium
- specialk simple ajax chat – add a fast, secure chat boxSimple Ajax Chat <= 20231101 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- wp codeus advanced sermonsWordPress Advanced Sermons plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hastheme wishsuiteWordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hasthemes wc builderWordPress WC Builder plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpwax post grid, slider & carousel ultimate, post grid\, slider \& carousel ultimate +1 moreWordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shahjada premium packagesWordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- property hive propertyhive, propertyhive wordpress +1 moreWordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- quantum cloud slider heroWordPress Slider Hero plugin <= 8.6.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- supsystic photo gallery by supsystic, photo gallery +1 moreWordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- moveaddons move addons for elementorWordPress Move Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ays pro photo gallery by ays, photo gallery team gallery by ays +1 moreWordPress Photo Gallery by Ays Plugin <=5.5.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ays pro survey maker, survey maker team maker +1 moreWordPress Survey Maker plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- compact wp audio playerWordPress Compact WP Audio Player plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jetmonsters stratumWordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themeum tutor lms elementor addonsWordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- baptiste placé icalendrierWordPress iCalendrier plugin <= 1.80 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- curl, apple macos, fedoraproject fedora +16 more +18 moreHTTP/2 push headers memory-leak8.6 High
- curl, apple macos, fedoraproject fedora +12 more +14 moreUsage of disabled protocol3.5 Low
- jewel theme master addons for elementor, master-addons master addons +1 moreWordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- alordiel dropdown multisite selectorWordPress Dropdown Multisite selector plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- camille v travelers' mapWordPress Travelers' Map plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- emendo seb co-marquage service-public.frWordPress Co-marquage service-public.fr plugin <= 0.5.71 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- edgarrojas pdf builder for wpformsWordPress PDF Builder for WPForms plugin <= 1.2.88 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 moreWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- active websight seo backlink monitorWordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- gs plugins pins for pinterest, gsplugins gs pinterest portfolio +1 moreWordPress Pinterest Plugin <= 1.8.2 - Cross Site Scripting (XSS)6.5 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- jonathan kissam action networkThe Action Network plugin for WordPress is vulnerable to SQL Injection via the 'bulk-action'...7.2 High
- elementor website builder, https://elementor.com/ elementor website builder pro +1 moreElementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation5.4 Medium
- elementor pro, https://elementor.com/ elementor website builder pro +1 moreElementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload6.4 Medium
- elementor pro, website builder, https://elementor.com/ elementor website builder pro +2 moreElementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag6.4 Medium
- elementor pro, https://elementor.com/ elementor website builder pro +1 moreElementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4 Medium
- elementor pro, https://elementor.com/ elementor website builder pro +1 moreElementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- semenov new royalsliderWordPress New RoyalSlider plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- appscreo easy social share buttonsWordPress Easy Social Share Buttons plugin <= 9.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cloudways breezeWordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themekraft buddyformsWordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability5.8 Medium
- wordpressdotorg wordpress importer, xylusthemes wp smart import +1 moreWordPress WP Smart Import plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- unknown wp-lister lite for amazonWordPress WP-Lister Lite for Amazon plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- foliovision: making the web work for you fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreWordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreprotect the fetch of ->fd[fd] in do_dup2() from mispredictions5.5 Medium
- icegram email subscribers & newslettersWordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…