CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- catch themes full frameWordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability5.1 Medium
- trustmary review & testimonial widgetsWordPress Review & testimonial widgets plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicheaddons medical addon for elementorWordPress Medical Addon for Elementor plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicejobWordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicheaddons charity addon for elementorWordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- atawai gum elementor addonWordPress Gum Elementor Addon plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicejobWordPress NiceJob plugin < 3.6.5 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- david garlitz vialaWordPress Viala theme <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 moreWordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- elsight halo version 11.7.1.5, halo firmware +1 moreElsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9.8 Critical
- elsight halo version 11.7.1.5, halo firmware +1 moreElsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9.8 Critical
- zkteco iclock v3.1-168ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- cavokCavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9.8 Critical
- multi-dncMulti-DNC – CWE-35: Path Traversal: '.../...//'7.5 High
- nicheaddons primary addon for elementorWordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- atawai gum elementor addonWordPress Gum Elementor Addon plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pierre lebedel kodex posts likesWordPress Kodex Posts likes plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- magepeople team multipurpose ticket booking managerWordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wp travel travelWordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- plainware shiftcontroller employee shift schedulingWordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- northern beaches websites ideapushWordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- androidbubbles wp datepickerWordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- 10web photo gallery by 10web, photo gallery +1 moreWordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- kevon adonis wp abstractsWordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- sonarrSonarr – CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- diebold nixdorf vynamic view prior to v5.9.5, dieboldnixdorf vynamic view +1 moreDiebold Nixdorf – CWE-427: Uncontrolled Search Path Element7.3 High
- themify woocommerce product filter, themifyme themify – woocommerce product filter +1 moreWordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +2 moreWordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- codepeople cp pollsWordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- seedprod coming soon page, under construction & maintenance mode by seedprodWordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- emraan cheema cubewp formsWordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- bit apps form, unknown bit form +1 moreWordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability7.1 High
- ays pro secure copy content protection and content lockingWordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- essential plugin meta slider and carousel with lightboxWordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sovell smart canteen systemSovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization6.3 Medium
- arisoft ari fancy lightboxWordPress ARI Fancy Lightbox -- Popup for WordPress plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- catch themes base, catchthemes catch base +1 moreWordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability5.1 Medium
- mark westguard ws form lite, ws form lite +1 moreWordPress WS Form LITE plugin <= 1.9.238 - Cross Site Scripting (XSS) vulnerability7.1 High
- ex-themes wp timeline – vertical and horizontal timeline pluginWordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- illid share this imageWordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- eyal fitoussi geo my wordpressWordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- quomodosoft elementsready, elementsready addons for elementor +1 moreWordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wowdevs sky addons for elementorWordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tangible loops & logicWordPress Loops & Logic plugin <= 4.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vladimir statsenko terms descriptionsWordPress Terms Descriptions plugin <= 3.4.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- james ward wp mail catcherWordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pickplugins post grid and gutenberg blocksWordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gamerz wp-downloadmanagerWordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pickplugins accordionWordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…