CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity License Generation Function Disclosure5.3 Medium
- bitdefender total securityInsecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)8.6 High
- bitdefender total securityInsecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)8.6 High
- bitdefender total securityHTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167)8.6 High
- bitdefender total securityInsecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)8.6 High
- chertz wp easy post types, wp easy post types project easy post types +1 moreWP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection8.8 High
- chertz wp easy post types, wp easy post types project easy post types +1 moreWP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions6.3 Medium
- chertz wp easy post typesWP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta6.4 Medium
- ninjateam click to chat, wp click to chat – email, live chat, call & book now buttons +1 moreClick to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode6.4 Medium
- bitdefender total securityInsecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)8.6 High
- bitdefender total securityImproper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)8.6 High
- tyche softwares arconix shortcodesArconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- madrasthemes mas companies for wp job managerMAS Companies For WP Job Manager <= 1.0.13 - Reflected Cross-Site Scripting6.1 Medium
- exceedone exmentStored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11...5.4 Medium
- exceedone exmentIncorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier...3.8 Low
- vmware spring, spring framework +1 moreCVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception3.1 Low
- wpzest easy menu manager | wpzest, easy menu manager +1 moreEasy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- tiandi flat ui buttonFlat UI Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via flatbtn Shortcode6.4 Medium
- apintop add widget after contentAdd Widget After Content <= 2.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- gantry 4 framework, rockettheme gantry +1 moreGantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting6.1 Medium
- smackcoders sendgrid, sendgrid for wordpress +1 moreSendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion4.3 Medium
- giuliopanda bulk images optimizer: resize, optimize, convert to webp, rename …, bulk images optimizer +1 moreBulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update4.3 Medium
- gurieveugen\&vitaliyshebela brandingBranding <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- parcelpro parcel proParcel Pro <= 1.8.4 - Reflected Cross-Site Scripting6.1 Medium
- dpd baltic shipping, dpdbaltics dpd baltic shipping +1 moreDPD Baltic Shipping <= 1.2.83 - Reflected Cross-Site Scripting6.1 Medium
- fatcatapps getresponse forms by optin cat, getresponse forms +1 moreGetResponse Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting6.1 Medium
- dankedev elemendaElemenda <= 0.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- infinite-scrollInfinite-Scroll <= 2.6.2 - Cross-Site Request Forgery to Plugin Settings Update5.3 Medium
- themeinwp social share with floating barSocial Share With Floating Bar <= 1.0.3 - Reflected Cross-Site Scripting6.1 Medium
- edit woocommerce templates project woocommerce templates, ioannup edit woocommerce templates +1 moreEdit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page6.1 Medium
- sukiwp suki sites importSuki Sites Import <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- k2-service product customizer lightProduct Customizer Light <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium
- secom wrtm326, wrtm326 firmware +1 moreSECOM WRTM326 - OS Command Injection9.8 Critical
- secom wrtr-304gn-304tw-upsc, wrtr-304gn-304tw-upsc firmware +1 moreSECOM WRTR-304GN-304TW-UPSC - OS Command Injection9.8 Critical
- grafanaGrafana SQL Expressions allow for remote code execution9.4 Critical
- j2eefastIn J2eeFAST <=2.7, the backend function has unsafe filtering, which allows an attacker to trigger...9.8 Critical
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability5.9 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.6 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability5.9 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.6 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.5 High
- vso convertxtodvdVSO ConvertXtoDvd ConvertXtoDvd.exe uncontrolled search path8.5 High
- mitsubishi electric corporation electric cnc c80 series c80, electric cnc e70 series e70, electric cnc e80 series e80 +17 more +19 moreDenial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series5.9 Medium
- ad inserter inserter, spacetime ad inserter +1 moreWordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- daniele alessandra da reactionsWordPress Da Reactions plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicheaddons primary addon for elementorWordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ryo arkhe blocksWordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…