CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- xpro addons — 140+ widgets for elementor130+ Widgets | Best Addons For Elementor – FREE <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- kitforest better elementor addons, wpdive better addons for elementor +1 moreBetter Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links6.4 Medium
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support +1 moreWP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection4.9 Medium
- logicore pocket news generatorPocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update5.4 Medium
- burgersoftware buttonButton <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode8.8 High
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support +1 moreWP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting7.2 High
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support +1 moreWP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection6.5 Medium
- oceanwpOceanWP <= 3.5.4 - Missing Authorization to Sensitive Information Exposure via Limited Local File Inclusion4.3 Medium
- ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 moreNinja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Authenticated (Author+) Stored Cross-Site Scripting4.6 Medium
- weblizar lightbox slider – responsive lightbox galleryLightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection5.4 Medium
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support +1 moreWP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection7.2 High
- technocrackers christmas greetingsChristmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting6.1 Medium
- ninjaforms ninja forms, kstover ninja forms – the contact form builder that grows with you +1 moreNinja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export4.3 Medium
- tsina news wallNews Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Update4.3 Medium
- backie wp-eggdropWP-Eggdrop <= 0.1 - Cross-Site Request Forgery to Settings Update5.4 Medium
- backie wp-eggdropWP-Eggdrop <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- logicore pocket news generatorPocket News Generator <= 0.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- easy-appointments easy appointments, easyappointments +1 moreEasy Appointments <= 3.11.18 - Insufficient Authorization4.3 Medium
- easy-appointments easy appointmentsEasy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- athemes sydney toolboxSydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id6.4 Medium
- zephyrproject zephyrBluetooth: integer underflow in gatt_find_info_rsp6.8 Medium
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 moreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- david lingren media library assistantMedia Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode6.4 Medium
- huashi private cloud cdn live streaming acceleration serverAn issue in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport v.1.1.2...9.8 Critical
- tenda ac15 firmware, ac15v1.0 firmware +1 moreTenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter.8.0 High
- tenda f1202 firmwareTenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of...6.5 Medium
- tenda f1202 firmwareTenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the...4.3 Medium
- tenda f1202 firmwareTenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function...8.8 High
- tenda f1202 firmware, fh1202 firmware +1 moreTenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in...6.5 Medium
- tenda f1202, f1202 firmware +1 moreTenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter...9.8 Critical
- tenda f1202 firmwareTenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface parameter in...8.0 High
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security parameter from the...6.5 Medium
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from...6.5 Medium
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedStartTime parameter...4.3 Medium
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from...9.8 Critical
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the list1 parameter from...5.7 Medium
- tenda fh1205, fh1205 firmware +1 moreTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from...9.8 Critical
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from...8.8 High
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedEndTime parameter from...8.0 High
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the entrys parameter from...8.0 High
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the urls parameter from...8.8 High
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from...6.5 Medium
- tenda fh1205 firmwareTenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from...9.8 Critical
- tenda ac15 firmwareTenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the...4.3 Medium
- wintercms winterWinter CMS Server-Side Template Injection (SSTI) vulnerability7.2 High
- tongtianxing technology co ltd cmsv6SQL Injection vulnerability in Tongtianxing Technology Co., Ltd CMSV6 v.7.31.0.2 through v.7.31.0...9.8 Critical
- messense aliyundrive-webdavaliyundrive-webdav vulnerable to Command Injection9.8 Critical
- arm mbed crypto, mbed tls, fedoraproject fedora +2 more +4 moreAn issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and...8.2 High
- sem-cms semcmsSEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before...7.2 High
- dlink dir-3040 firmwareDlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write...7.3 High
- Show moreLoading…