CVEs published in October 2024
3,640 vulnerabilities, 364 critical, 17 exploited.
- viloliving vilo 5 firmware, vilo 5 mesh wifi system firmware +1 moreA Buffer Overflow in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote,...9.6 Critical
- viloliving vilo 5 mesh wifi system firmwareA Buffer Overflow vulnerabilty in the local_app_set_router_token function of Vilo 5 Mesh WiFi...9.6 Critical
- mitel micollab, mivoice business, mivoice business solution virtual instance +2 moreA vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business...5.6 Medium
- mitel micollab, mivoice business solution virtual instance, mivoice business solutions virtual instance +2 moreA vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business...9.8 Critical
- mitel micollabA vulnerability in the NuPoint Messenger (NPM) component of Mitel MiCollab through version 9.8...6.7 Medium
- mitel micollabA vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an...9.8 Critical
- mitel micollab, micollab nupoint messanger +1 moreA vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an...9.8 Critical
- irfanviewBuffer Overflow vulnerability in IrfanView 32bit v.4.66 allows a local attacker to cause a denial...5.5 Medium
- mitel micollabA vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110...4.8 Medium
- mitel micollabA vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow...4.8 Medium
- mitel micollabA vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow...7.2 High
- mitel micollabA vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110...7.2 High
- litespeed technologies cache, litespeedtech litespeed cache +1 moreWordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability9.8 Critical
- wpdiscover photo gallery builderWordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability4.3 Medium
- majas-lapu-izstrade cartbounty, streamline cartbounty – save and recover abandoned carts for woocommerce, woocommerce streamline.lv +2 moreWordPress CartBounty plugin <= 8.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- dublue table of contents plusWordPress Table of Contents Plus plugin <= 2408 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpweb social auto posterWordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- infomaniak vod infomaniakWordPress VOD Infomaniak plugin <= 1.5.7 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- northern beaches websites ideapushWordPress IdeaPush plugin <= 8.69 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- boxystudio cooked, gora tech llc cooked pro +1 moreWordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wp-buy wp content copy protection & no right click, wp content copy protection \& no right click +1 moreWordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- noor alam wordpress image seoWordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- whiletrue most and least read posts widgetWordPress Most And Least Read Posts Widget plugin <= 2.5.18 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- edush maxim googledrive folder listWordPress GoogleDrive folder list plugin <= 2.2.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- avchat.net avchat video chatWordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability7.1 High
- androidbubbles endless posts navigationWordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability7.1 High
- themeisle mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.7 - SQL Injection vulnerability8.5 High
- brandon white author discussionWordPress Author Discussion plugin <= 0.2.2 - SQL Injection vulnerability8.5 High
- infotuts sw contact formWordPress SW Contact Form plugin <= 1.0 - SQL Injection vulnerability8.5 High
- developersnote simple code insert shortcodeWordPress Simple Code Insert Shortcode plugin <= 1.0 - SQL Injection vulnerability8.5 High
- dan alexander sermonaudio widgets, sermonaudio widgets +1 moreWordPress SermonAudio Widgets plugin <= 1.9.3 - SQL Injection vulnerability8.5 High
- henrique rodrigues safetyformsWordPress SafetyForms plugin <= 1.0.0 - CSRF to SQL Injection vulnerability8.2 High
- nyasro rate own postWordPress Rate Own Post plugin <= 1.0 - SQL Injection vulnerability8.5 High
- anciwasim back link trackerWordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability8.2 High
- jordan lyall mytweetlinksWordPress MyTweetLinks plugin <= 1.1.1 - SQL Injection vulnerability8.5 High
- acespritech social link groupsWordPress Social Link Groups plugin <= 1.1.0 - SQL Injection vulnerability8.5 High
- mrcheck116 ferma.ru.netWordPress FERMA.ru.net plugin <= 1.3.3 - SQL Injection vulnerability8.5 High
- omardabbas eu/uk vat manager for woocommerce, wpfactory eu\/uk vat manager for woocommerce +1 moreWordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability7.1 High
- aatmaadhikari apa register newsletter form, apa register newsletter form +1 moreWordPress APA Register Newsletter Form plugin <= 1.0.0 - CSRF to SQL Injection vulnerability8.2 High
- aatmaadhikari apa banner slider, apa banner slider +1 moreWordPress Apa Banner Slider plugin <= 1.0.0 - CSRF to SQL Injection vulnerability8.2 High
- hasan movahed duplicate title validateWordPress Duplicate Title Validate plugin <= 1.0 - SQL Injection vulnerability8.5 High
- gerry ntabuhashe gerryworks post by mail, gerryworks post by mail +1 moreWordPress GERRYWORKS Post by Mail plugin <= 1.0 - Privilege Escalation vulnerability8.8 High
- sovratec case management, sovratecdev sovratec case management +1 moreWordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- vasileios kerasiotis affiliatorWordPress Affiliator plugin <= 2.1.3 - Arbitrary File Upload vulnerability10.0 Critical
- asep bagja priandana woostagram connectWordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability10.0 Critical
- vivek tamrakar wp rest api fnsWordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- brx8r nice backgroundsWordPress Nice Backgrounds plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- myriad solutionz property lot management systemWordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability9.9 Critical
- redhopit wp dropbox dropinsWordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- jack zhu photokitWordPress photokit plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- Show moreLoading…