CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- sysaidSysAid - CWE-918: Server-Side Request Forgery (SSRF)7.2 High
- webtechstreet elementor addon elementsWordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pixelite events managerWordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- linux, linux kernel +1 morenetfilter: nftables: exthdr: fix 4-byte stack OOB write7.8 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- nickys image map proWordPress Image Map Pro premium plugin < 5.6.9 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS)6.1 Medium
- castos seriously simple podcastingWordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- digamber pradhan preview e-mails for woocommerce, preview e-mails for woocommerce e-mails for woocommerce +1 moreWordPress Preview E-mails for WooCommerce plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- archetyped favicon rotatorWordPress Favicon Rotator plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- archetyped cornerstoneWordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- avada fusion builderWordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability8.5 High
- trustindex.io wp testimonialsWordPress WP Testimonials plugin <= 1.4.3 - Auth. SQL Injection vulnerability7.6 High
- booster plus for woocommerce, for woocommerce, pluggabl llc booster plus for woocommerce +2 moreWordPress Booster Plus for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability6.5 Medium
- booster elite for woocommerce, for woocommerce, unknown booster elite for woocommerce +2 moreWordPress Booster Elite for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability6.5 Medium
- niteothemes cmp – coming soon & maintenanceWordPress CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin <= 4.1.10 - Server Side Request Forgery (SSRF) vulnerability5.5 Medium
- seraphinite solutions accelerator, seraphinitesoft seraphinite accelerator +1 moreWordPress Seraphinite Accelerator plugin <= 2.20.47 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- synology surveillance stationMissing authorization vulnerability in System webapi component in Synology Surveillance Station...9.9 Critical
- synology surveillance stationMissing authorization vulnerability in LayoutSave webapi component in Synology Surveillance...4.3 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationImproper validation of array index vulnerability in UserPrivilege.Enum webapi component in...5.4 Medium
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- synology surveillance stationMissing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance...7.7 High
- peepso community by peepsoWordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- tumult hype animationsWordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability9.1 Critical
- synology surveillance stationMissing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance...7.7 High
- mainwp links manager extensionWordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection Vulnerability8.1 High
- synology surveillance stationImproper neutralization of special elements used in an SQL command ('SQL Injection')...5.4 Medium
- brainstorm force premium starter templates, starter templates — elementor, wordpress & beaver builder templates +1 moreServer Side Request Forgery (SSRF) vulnerability in Starter Templates plugins7.1 High
- brainstorm force spectraWordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability7.1 High
- theme-fusion avadaWordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability7.7 High
- kadence wp gutenberg blocks by kadence blocks, kadencewp gutenberg blocks with ai +1 moreWordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerability7.7 High
- megamenu max mega menuWordPress Max Mega Menu plugin <= 3.3 - Broken Access Control vulnerability5.4 Medium
- extend themes colibri page builderWordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability5.4 Medium
- jordy meow ai engine: chatgpt chatbot, meowapps ai engine, jordy meow ai-engine +2 moreWordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability6.8 Medium
- jordy meow ai engine: chatgpt chatbot, meowapps ai engine, jordy meow ai-engine chatgpt chatbot +2 moreWordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability9.1 Critical
- realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 moreWordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability5.4 Medium
- repute infosystems armemberWordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability8.5 High
- repute infosystems armemberWordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability9.0 Critical
- wholesale wholesalexWordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability10.0 Critical
- wpengine wp migrateWordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability10.0 Critical
- poporon pz-linkcardPz-LinkCard <= 2.5.1 - Contributor+ SSRF5.1 Medium
- Show moreLoading…