CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- messagepack messagepack-csharpMessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow8.7 High
- wepic country flags for elementorWordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- takashi matsuyama my favoritesWordPress My Favorites plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicheaddons events addon for elementorWordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cliogrow clio growWordPress Clio Grow plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- saiful islam ultraaddons elementor liteWordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- omnipressteam omnipressWordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- daniel floeter hyperlink group blockWordPress Hyperlink Group Block plugin <= 1.17.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- weblizar lightbox slider – responsive lightbox galleryWordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ninja team click to chat – wp support all-in-one floating widget, ninjateam click to chat +1 moreWordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dfactory responsive lightboxWordPress Responsive Lightbox & Gallery plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- villatheme curcyWordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- villatheme email template customizer for woocommerce, woocommerce email template customizer +1 moreWordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gora tech llc cooked proWordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- exclusiveaddons exclusive addons for elementor, tim strifler exclusive addons elementor +1 moreWordPress Exclusive Addons for Elementor plugin <= 2.7.1 - Cross-Site Scripting vulnerability6.5 Medium
- presstigers simple testimonials showcaseWordPress Simple Testimonials Showcase plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- coder426 custom add to cart button label and linkWordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pepro dev. group peprodev ultimate invoiceWordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sinan yorulmaz g meta keywordsWordPress G Meta Keywords plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- portfoliohub wordpress portfolio builder – portfolio galleryWordPress WordPress Portfolio Builder – Portfolio Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpseek admin management xtendedWordPress Admin Management Xtended plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- toast plugins animatorWordPress Animator – Scroll Triggered Animations plugin <= 3.0.15 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- omarfolghe digitallyWordPress Digitally theme <= 1.0.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themesflat themesflat-addons-for-elementor, addons for elementor +1 moreWordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- edwiser bridge, wisdmlabs edwiser bridge +1 moreWordPress Edwiser Bridge plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- zodiac akismet htaccess writerWordPress Akismet htaccess writer plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- b.m. rafiul alam awesome contact form7 for elementorWordPress Awesome Contact Form7 for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- comfy comfyui, comfyanonymous comfyanonymous/comfyui, comfyanonymous\/comfyui +2 moreStored XSS in comfyanonymous/comfyui6.1 Medium
- hms networks ewon flexy 202HMS Networks EWON FLEXY 202 Insufficiently Protected Credentials7.1 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreStored XSS in binary-husky/gpt_academic5.4 Medium
- binary-husky binary-husky/gpt academic, gpt academic +1 morePath Traversal in binary-husky/gpt_academic6.5 Medium
- easy.jobs easyjobsWordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cookie scanner – nikel schubert scanner, cookie-scanner cookie scanner +1 moreWordPress Cookie Scanner plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- julian weinert // cs&m csliderWordPress cSlider plugin <= 2.4.2 - CSRF to Stored XSS vulnerability7.1 High
- shibu lijack a.k.a cyberjack cj change howdyWordPress CJ Change Howdy plugin <= 3.3.1 - CSRF to Stored XSS vulnerability7.1 High
- arif nezami better author bioWordPress Better Author Bio plugin <= 2.7.10.11 - CSRF to Cross Site Scripting (XSS) vulnerability7.1 High
- ahmet imamoglu ahmeti wp timeline, ahmeti wp timeline +1 moreWordPress Ahmeti Wp Timeline plugin <= 5.1 - CSRF to Stored XSS vulnerability7.1 High
- dotonpaper pinpoint booking systemWordPress Pinpoint Booking System plugin <= 2.9.9.5.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerability5.4 Medium
- rudestan vkontakte wall postWordPress VKontakte Wall Post plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- madiri salman aashish adding drop down roles in registration, user-drop-down-roles-in-registration +1 moreWordPress Adding drop down roles in registration plugin <= 1.1 - Privilege Escalation vulnerability9.8 Critical
- themexpo rs-membersWordPress RS-Members plugin <= 1.0.3 - Privilege Escalation vulnerability8.8 High
- codepassenger job board manager for wordpressWordPress Job Board Manager for WordPress plugin <= 1.0 - Privilege Escalation vulnerability9.8 Critical
- shahjahan jewel fluent supportWordPress Fluent Support plugin <= 1.8.0 - SQL Injection vulnerability8.5 High
- wp grim classic editor and classic widgetsWordPress Classic Editor and Classic Widgets plugin <= 1.4.1 - SQL Injection vulnerability8.5 High
- cmssoft csv product import export for woocommerceWordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability8.5 High
- anand23 ajax rating with custom loginWordPress Ajax Rating with Custom Login plugin <= 1.1 - SQL Injection vulnerability9.3 Critical
- zohocrm zoho crm lead magnetWordPress Zoho CRM Lead Magnet plugin <= 1.7.9.7 - SQL Injection vulnerability8.5 High
- surferWordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability7.6 High
- wpfactory customer email verification for woocommerce, email verification for woocommerce +1 moreWordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability9.3 Critical
- videowhisper contact forms, live support, crm, video messages, contact forms live support crm video messages plugin +1 moreWordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability7.5 High
- Show moreLoading…