CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- search atlas seo, search atlas group atlas seo +1 moreWordPress Search Atlas SEO plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- iova.mihai slicewpWordPress SliceWP Affiliates plugin <= 1.1.18 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- basix nex-formsWordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jegtheme jeg elementor kitWordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bdthemes element pack elementor addons, element pack +1 moreWordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mohamed magdy quill formsWordPress Quill Forms plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- eyecix jobsearchWordPress WP JobSearch plugin <= 2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- robokassa payment gateway for woocommerceWordPress Robokassa payment gateway for Woocommerce plugin <= 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- katie zotpressWordPress Zotpress plugin <= 7.3.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- illid advanced woo labelsWordPress Advanced Woo Labels plugin <= 2.01 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ghozylab gallery lightboxWordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bannersky bsk forms blacklistWordPress BSK Forms Blacklist plugin <= 3.8.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formEasySetupWWConfig buffer overflow8.7 High
- themelooks enter addonsWordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rometheme rtmkitWordPress RomethemeKit For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formEasySetPassword buffer overflow8.7 High
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bdthemes ultimate store kit elementor addonsWordPress Ultimate Store Kit Elementor Addons plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- element invader elementinvader addons for elementor, elementinvader addons for elementor +1 moreWordPress ElementInvader Addons for Elementor plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bplugins logo carousel – clients logo carousel for wpWordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- detheme dethemekit for elementorWordPress DethemeKit For Elementor plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- zoho forms formsWordPress Zoho forms plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tinypngWordPress TinyPNG plugin <= 3.4.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vdocipherWordPress VdoCipher plugin <= 1.29 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formDeviceReboot buffer overflow8.7 High
- keap official opt-in forms, unknown keap official opt-in forms +1 moreWordPress Keap Official Opt-in Forms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- alex include fussball.de widgetsWordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- copyscape premiumWordPress Copyscape Premium plugin <= 1.3.9 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- payflex payment gateway, tomlister payflex payment gateway +1 moreWordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability4.7 Medium
- essekia helpie faqWordPress FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ex-themes wp timeline – vertical and horizontal timeline plugin, wp timeline +1 moreWordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability7.5 High
- ex-themes wp timeline – vertical and horizontal timeline plugin, wp timeline +1 moreWordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability8.1 High
- bit apps form, bitapps bit form +1 moreWordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerability8.0 High
- dimitri grassi salon booking systemWordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- condless cities shipping zones for woocommerce, cities shopping zones for woocommerce +1 moreWordPress Cities Shipping Zones for WooCommerce plugin <= 1.2.7 - Local File Inclusion vulnerability6.6 Medium
- martin greenwood wpspxWordPress WPSPX plugin <= 1.0.2 - Local File Inclusion vulnerability7.5 High
- abc app creator app creator, abcapp creator +1 moreWordPress ABCApp Creator plugin <= 1.1.2 - Local File Inclusion vulnerability8.1 High
- istmo plugins instant chat floating button for wordpress websitesWordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability7.5 High
- rankmath rank math seo – ai seo tools to dominate seo rankings, seo, seo ai seo tools to dominate seo rankings +2 moreRank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection7.2 High
- rankmath rank math seo – ai seo tools to dominate seo rankings, seo +1 moreRank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete6.5 Medium
- amarksteadman podiantWordPress Podiant plugin <= 1.1 - Local File Inclusion vulnerability7.5 High
- istmoplugins users control, users control control +1 moreWordPress Users Control plugin <= 1.0.16 - Local File Inclusion vulnerability7.5 High
- vmax studio project manager, vmaxstudio vmax project manager +1 moreWordPress Vmax Project Manager plugin <= 1.0 - Local File Inclusion to RCE vulnerability9.6 Critical
- innate images llc vr calendarWordPress VR Calendar plugin <= 2.4.0 - Local File Inclusion vulnerability7.5 High
- wpdev33 wp newsletter subscriptionWordPress WP Newsletter Subscription plugin <= 1.1 - Local File Inclusion vulnerability7.5 High
- expresstech systems wp ticket ultra help desk & support plugin, wp ticket ultra help desk & support plugin +1 moreWordPress WP Ticket Ultra plugin <= 1.0.5 - Local File Inclusion vulnerability7.5 High
- james low css js filesWordPress CSS JS Files plugin <= 1.5.0 - Directory Traversal to File Read vulnerability4.9 Medium
- Show moreLoading…