CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- multivendorx wc marketplaceWordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp-crm systemWordPress WP-CRM System plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- posimyth nexter blocksWordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- collect.chat inc. collectchatWordPress Collect.chat plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wppool webinar and video conference with jitsi meetWordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bplugins print page blockWordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bestwebsoft limit attempts by bestwebsoftWordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themify event post, themifyme themify event post +1 moreWordPress Themify Event Post plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pickplugins post gridWordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gs plugins testimonial sliderWordPress GS Testimonial Slider plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- zionbuilder.io wordpress page builder – zion builderWordPress WordPress Page Builder – Zion Builder plugin <= 3.6.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ghozylab, inc. web iconsWordPress Web Icons plugin <= 1.0.0.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crm perks forms, crmperks crm perks forms +1 moreWordPress CRM Perks Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- creative solutions image slider – responsive slider pluginWordPress Creative Image Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- tukaani xz, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXz: malicious code in distributed source10.0 Critical
- supsystic slider by supsysticWordPress Slider by Supsystic plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- booking activities team activitiesWordPress Booking Activities plugin <= 1.15.19 - Cross Site Scripting (XSS) vulnerability7.1 High
- step-byte-service gmbh openstreetmap for gutenberg and wpbakery page builder (formerly visual composer)WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- infinitum form geo controllerWordPress Geo Controller plugin <= 8.6.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pluginops landing page builderWordPress Landing Page Builder plugin <= 1.5.1.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- brave popup builderWordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- gamipressWordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tumult inc hype animationsWordPress Tumult Hype Animations plugin <= 1.9.11 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- veronalabs wp smsWordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An...5.7 Medium
- pluginus husky – products filter for woocommerce (formerly woof), husky - products filter professional for woocommerce +1 moreWordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 moreWordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability4.3 Medium
- all in one wp security & firewall team in one wp security & firewallWordPress All-In-One Security (AIOS) – Security and Firewall plugin <= 5.2.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- klarna payments for woocommerce, for woocommerce +1 moreWordPress Klarna Payments for WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability5.3 Medium
- b-website simple revisions deleteWordPress Simple Revisions Delete plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- nextcloud nextcloudpiCommand Injection as root in NextCloudPi web panel10.0 Critical
- themelocation custom woocommerce checkout fields editorWordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- landingi landing pagesWordPress Landingi Landing Pages plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- enalean tuleapTuleap deleting or moving an artifact can delete values from unrelated artifacts7.6 High
- metagauss profilegridWordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- wpexperts wholesale for woocommerceWordPress Wholesale For WooCommerce plugin <= 2.3.0 - Unauthenticated Sensitive Data Exposure vulnerability5.3 Medium
- frederic gilles fg prestashop to woocommerceWordPress FG PrestaShop to WooCommerce plugin <= 4.45.1 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- paid memberships pro – payfast gateway add on, paidmembershipspro paid memberships pro +1 moreWordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- webtoffee import export wordpress usersWordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerability4.3 Medium
- codeigniter, codeigniter4 +1 moreCodeIgniter4 Language class DoS Vulnerability7.5 High
- workos authkit-nextjs@workos-inc/authkit-nextjs session replay vulnerability4.8 Medium
- electron packager, electron-packager project electron-packager +1 more@electron/packager's build process memory potentially leaked into final executable7.5 High
- argoproj argo cd, argo-cd +1 moreUncontrolled Resource Consumption vulnerability in ArgoCD's repo server6.5 Medium
- datalens-tech datalensRemote code execution in datalens-ui8.8 High
- fit2cloud jumpserverJumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery10.0 Critical
- fit2cloud jumpserverJumpServer's insecure Ansible playbook validation leads to RCE in Celery10.0 Critical
- fit2cloud jumpserverJumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked4.6 Medium
- fit2cloud jumpserverJumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality4.6 Medium
- apache fineractApache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.8.4 High
- Show moreLoading…