CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- apache fineractApache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.9.9 Critical
- apache fineractApache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database quer…8.3 High
- easycorp easyadminEasyCorp EasyAdmin Autocomplete autocomplete.js cross site scripting3.5 Low
- apple swift prometheus, swift-server swift-prometheus +1 moreSwift Prometheus un-sanitized metric name or labels can be used to take over exported metrics5.9 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerability6.5 Medium
- molonguiWordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerability2.7 Low
- vsourz digital all in one redirectionWordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability5.4 Medium
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerability7.6 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability9.3 Critical
- wp chill download monitorWordPress Download Monitor theme <= 4.9.4 - Auth. SQL Injection vulnerability7.6 High
- crm perks forms, crmperks crm perks forms +1 moreWordPress CRM Perks Forms plugin <= 1.1.4 - SQL Injection vulnerability8.5 High
- crm perks forms, crmperks crm perks forms +1 moreWordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability9.3 Critical
- i thirteen web solution wp responsive tabs horizontal vertical and accordion tabs, i13websolution wp responsive tabs +1 moreWordPress WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.17 - SQL Injection vulnerability8.5 High
- bdthemes element pack elementor addons, element pack +1 moreWordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability8.5 High
- faboba falang, falang multilanguage +1 moreWordPress Falang multilanguage for WordPress plugin <= 1.3.47 - SQL Injection vulnerability7.6 High
- 沈唁 oss aliyun, aliyun-oss-client project aliyun-oss-client +1 moreWordPress OSS Aliyun plugin <= 1.4.10 - SQL Injection vulnerability7.6 High
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- metagauss profilegridWordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerability8.5 High
- metagauss profilegridWordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability9.3 Critical
- katie zotpressWordPress Zotpress plugin <= 7.3.7 - SQL Injection vulnerability8.5 High
- sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 moreWordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability7.6 High
- max foundry media library foldersWordPress Media Library Folders plugin <= 8.1.7 - Auth. SQL Injection vulnerability8.5 High
- bulletin wordpress announcement & notification banner plugin – bulletin, rocksolidplugins bulletin +1 moreWordPress Announcement & Notification Banner – Bulletin plugin <= 3.8.5 - SQL Injection vulnerability7.6 High
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability10.0 Critical
- cubewp, cubewp – all-in-one dynamic content framework, cubewp1211 cubewp – all-in-one dynamic content framework +2 moreWordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability9.9 Critical
- wp email newsletter team - fluentcrm fluent crm, wpmanageninja fluentcrm +1 moreWordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- hans matzen wp-forecastWordPress wp-forecast plugin <= 9.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability5.4 Medium
- hashthemes hash elementsWordPress Hash Elements plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- beaver builder builder, fastlinemedia beaver builder +1 moreWordPress Beaver Builder plugin <= 2.7.4.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- betteraddons better elementor addonsWordPress Better Elementor Addons plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpjobboard jobeleon, jobeleon theme +1 moreWordPress Jobeleon theme <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pluginus wordpress currency switcher, realmag777 wpcs +1 moreWordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 moreWordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- realmag777 woocs – woocommerce currency switcher, pluginus fox - currency switcher professional for woocommerce +1 moreWordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- simple sponsorships sponsors, wpsimplesponsorships simple sponsorship +1 moreWordPress Sponsors plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- everpress mailsterWordPress Mailster plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- lordicon animated iconsWordPress Lordicon Animated Icons plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- labib ahmed carousel anything for wpbakery page builder, webdevocean carousel anything +1 moreWordPress Carousel Anything For WPBakery Page Builder plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- qdrantQdrant Full Snapshot REST API snapshots.rs path traversal5.5 Medium
- egehan security webpdks, webpdks egehan security +1 moreSQLi in WebPDKS9.8 Critical
- algoritim e-commerce softwareReflected XSS in Algoritim E-commerce Software6.1 Medium
- elastic elasticsearchElasticsearch Uncaught Exception4.3 Medium
- cyberchimps responsiveResponsive <= 5.0.2 - Missing Authorization to HTML Injection7.5 High
- realmag777 husky – products filter professional for woocommerce, pluginus husky - products filter professional for woocommerce +1 moreHUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion7.2 High
- linux, linux kernel +1 moresh: push-switch: Reorder cleanup operations to avoid use-after-free bug8.4 High
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal9.8 Critical
- stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 moreMasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action9.8 Critical
- Show moreLoading…