CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- inspireui mstore api – create native android & ios apps on the cloud, mstore api +1 moreMStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload4.3 Medium
- arnoldgoodway tweaker5Tweaker5 <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- arnoldgoodway neighborlyNeighborly <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- cvscvstechcom exit notifierExit Notifier <= 1.10.4 - Reflected Cross-Site Scripting6.1 Medium
- benjaminprojas wp editorWP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization7.2 High
- lucasstad lucas string replaceLucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting6.1 Medium
- nattywp delicateDelicate <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- kubiq pdf thumbnail generatorPDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting6.1 Medium
- allprices beautyBeauty <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via tpl_featured_cat_id Parameter6.4 Medium
- sound4 ltd. streamStream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update8.8 High
- coffee2code custom post limitsCustom Post Limits <= 4.4.1 - Unauthenticated Full Path Disclosure5.3 Medium
- khromov email obfuscate shortcodeEmail Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- arielhr1987 cron jobsCron Jobs <= 1.2.9 - Reflected Cross-Site Scripting6.1 Medium
- iovamihai affiliate program suite — slicewp affiliates, slicewp affiliate program suite +1 moreWordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting6.1 Medium
- fluxbuilder mstore api, inspireui mstore api – create native android & ios apps on the cloud +1 moreMStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration7.3 High
- arielhr1987 roles & capabilities, leira roles \& capabilities +1 moreRoles & Capabilities <= 1.1.9 - Reflected Cross-Site Scripting6.1 Medium
- towfiq i. triton liteTriton Lite <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4 Medium
- linux, linux kernel +1 moreperf/aux: Fix AUX buffer serialization7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)9.8 Critical
- adobe coldfusionColdFusion | Improper Authentication (CWE-287)7.5 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- tnb mobile solutions cockpit software, tnbmobil cockpit +1 moreHardcoded Credentals in TNB Mobile Solutions' Cockpit Software8.8 High
- adobe illustratorIllustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe illustratorIllustrator | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe illustratorIllustrator | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe illustratorIllustrator | Use After Free (CWE-416)7.8 High
- adobe illustratorIllustrator | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe premiere proPremiere Pro | Out-of-bounds Write (CWE-787)7.8 High
- adobe premiere proPremiere Pro | Use After Free (CWE-416)5.5 Medium
- adobe after effectsAfter Effects | Out-of-bounds Write (CWE-787)7.8 High
- adobe after effectsAfter Effects | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe after effectsAfter Effects | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe after effectsAfter Effects | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe after effectsAfter Effects | Out-of-bounds Write (CWE-787)7.8 High
- adobe media encoderMedia Encoder | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe media encoderMedia Encoder | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe media encoderMedia Encoder | Out-of-bounds Write (CWE-787)7.8 High
- adobe media encoderMedia Encoder | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe media encoderMedia Encoder | Out-of-bounds Read (CWE-125)5.5 Medium
- murgroland wp simple booking calendarWP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting6.1 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget6.4 Medium
- boopathi rajan wp test emailWP Test Email <= 1.1.7 - Reflected Cross-Site Scripting6.1 Medium
- muffingroup bethemeBetheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File6.4 Medium
- yithemes yith custom loginYITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting6.1 Medium
- radiustheme classified listing, techlabpro1 classified listing – ai-powered classified ads & business directory plugin +1 moreClassified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization6.3 Medium
- Show moreLoading…