CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- tecno 4g portable wifi tr118, tecno-mobile 4g portable wifi tr118 firmware +1 moreTecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injection5.1 Medium
- giveaway boost boost, giveawayboost giveaway boost +1 moreWordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability9.8 Critical
- smartdevth advanced advertising systemWordPress Advanced Advertising System plugin <= 1.3.1 - PHP Object Injection vulnerability9.8 Critical
- brandon clark sitebuilder dynamic components, site builder dynamic components +1 moreWordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability9.8 Critical
- piyush patel shipyaari shipping managementWordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability9.8 Critical
- jeroen berkvens ssv eventsWordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerability9.6 Critical
- wavlink wn530h4, wn530hg4, wn572hg3 +3 more +5 moreWAVLINK WN530H4/WN530HG4/WN572HG3 Front-End Authentication Page login.cgi Goto_chidx stack-based overflow8.7 High
- paxman product website showcaseWordPress Product Website Showcase plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- vivek tamrakar wp rest api fnsWordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability9.8 Critical
- n-media simple user registration, najeebmedia memberhero +1 moreWordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability9.8 Critical
- mighty plugins builder, mightyplugins mighty builder +1 moreWordPress Mighty Builder plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shahriar alam all in one sliderWordPress All in One Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- unizoe web solutions jlayer parallax sliderWordPress jLayer Parallax Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dotsquares google map locationsWordPress Google Map Locations plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- devitems wp educationWordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- md abdul kader easy addons for elementorWordPress Easy Addons for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wavlink wn530h4, wn530hg4, wn572hg3 +3 more +5 moreWAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection5.1 Medium
- phpgurukul ifsc code finder project, ifsc code finder +1 morePHPGurukul IFSC Code Finder Project search.php cross site scripting5.3 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Booking Details Page book-details.php cross site scripting5.3 Medium
- didi ddmqdidi DDMQ Console Module improper authentication6.9 Medium
- code-projects blood bank systemcode-projects Blood Bank System massage.php sql injection5.1 Medium
- code-projects hospital management systemcode-projects Hospital Management System get_doctor.php sql injection5.3 Medium
- code-projects hospital management systemcode-projects Hospital Management System change-password.php sql injection5.3 Medium
- 1000 projects sales management systemCodezips Sales Management System deletecustind.php sql injection6.9 Medium
- 1000 projects sales management systemCodezips Sales Management System checkuser.php sql injection6.9 Medium
- 1000 projects sales management systemCodezips Sales Management System deletecustcom.php sql injection6.9 Medium
- oretnom23 sentiment based movie rating systemSourceCodester Sentiment Based Movie Rating System movie_details.php sql injection5.3 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Edit Subdomain Details Page edit-subadmin.php sql injection5.3 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Update Boat Image Page change-image.php unrestricted upload5.3 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System BW Dates Report Page bwdates-report-details.php sql injection5.3 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System My Profile Page profile.php sql injection6.9 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System session_start session fixiation6.9 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection6.9 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Sign In Page index.php sql injection6.9 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Book a Boat Page book-boat.php cross site scripting5.3 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Check Booking Status Page status.php sql injection5.3 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System Book a Boat Page book-boat.php sql injection5.3 Medium
- code-projects blood bank systemcode-projects Blood Bank System viewrequest.php cross site scripting5.3 Medium
- jsbroks coco annotatorjsbroks COCO Annotator Session predictable state6.3 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System manage_supplier.php sql injection5.3 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System add_new_supplier.php sql injection5.3 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System add_new_purchase.php sql injection5.3 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System manage_medicine.php sql injection5.3 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System manage_invoice.php sql injection5.3 Medium
- esafenet cdgESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection5.3 Medium
- esafenet cdgESAFENET CDG MultiServerAjax.java connectLogout sql injection5.3 Medium
- streamweasels twitch integrationStreamWeasels Twitch Integration <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed Shortcode6.4 Medium
- esafenet cdgESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injection5.3 Medium
- element invader elementinvader addons for elementor, elementinvader addons for elementor +1 moreElementInvader Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Information Exposure4.3 Medium
- eventon (pro) - wordpress virtual event calendar plugin, myeventon eventon-lite +1 moreEventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email4.3 Medium
- Show moreLoading…