CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- avirtum ipanorama 360 wordpress virtual tour builder, ipanorama 360 wordpress virtual tour builder project 360 wordpress virtual tour builder +1 moreWordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerability5.3 Medium
- tyche softwares product delivery date for woocommerce – lite, tychesoftwares product delivery date for woocommerce lite +1 moreWordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability5.3 Medium
- martin gibson wp gotowebinarWordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerability4.3 Medium
- wpdeveloper embedpressWordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability6.3 Medium
- creative motion auto featured image (auto post thumbnail)WordPress Auto Featured Image plugin <= 4.1.2 - Broken Access Control vulnerability4.3 Medium
- epsiloncool wp fast total searchWordPress WP Fast Total Search <= 1.68.232 - Broken Access Control vulnerability4.3 Medium
- spider-themes eazydocsWordPress EazyDocs plugin <= 2.5.0 - Broken Access Control vulnerability7.1 High
- seraphinite solutions post .docx sourceWordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Broken Access Control vulnerability4.3 Medium
- pickplugins product designerWordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerability7.5 High
- catkin redi restaurant reservationWordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability5.4 Medium
- meks video importer, mekshq meks video importer +1 moreWordPress Meks Video Importer plugin <= 1.0.12 - Broken Access Control vulnerability5.4 Medium
- packlink shipping s.l. pro shipping moduleWordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerability5.4 Medium
- upqode plum, plum: spin wheel & email pop-up +1 moreWordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability8.3 High
- upqode plum, plum: spin wheel & email pop-up +1 moreWordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability5.3 Medium
- josh kohlbach wholesale suiteWordPress Wholesale Suite plugin <= 2.1.12 - Broken Access Control vulnerability5.3 Medium
- tyche softwares arconix shortcodesWordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability5.3 Medium
- theinnovs eleformsWordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability5.3 Medium
- atarimWordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability6.5 Medium
- creativemotion titan anti-spam & securityWordPress Titan Anti-spam & Security plugin <= 7.3.6 - Broken Access Control vulnerability6.5 Medium
- siteground securityWordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability5.4 Medium
- conveythis language translate widget for wordpress – conveythis, language translate widget for wordpress conveythis +1 moreWordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability5.3 Medium
- tyche softwares arconix faq, tychesoftwares acronix faq +1 moreWordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability5.3 Medium
- mediaron custom query blocksWordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability5.3 Medium
- kainelabs youzifyWordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability5.4 Medium
- icegramWordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability5.3 Medium
- quadlayers wp social feed galleryWordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability6.5 Medium
- iptanus wordpress file uploadWordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability4.3 Medium
- wpweb woocommerce pdf vouchersWordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities7.3 High
- ymc filter & grids, ymc-22 filter \& grids +1 moreWordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability7.3 High
- fetch designs sign-up sheetsWordPress Sign-up Sheets plugin <= 2.2.12 - Broken Access Control vulnerability5.3 Medium
- incsub hummingbirdWordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability4.3 Medium
- xserver inc. typesquare webfonts, gmo typesquare webfonts for conoha +1 moreWordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability5.3 Medium
- aruba.it aruba hispeed cacheWordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability4.3 Medium
- creative motion robin image optimizerWordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerability6.5 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability4.3 Medium
- xootix waitlist woocommerce ( back in stock notifier )WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability4.3 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability4.3 Medium
- ahmed kaludi, mohammed kaludi amp for wpWordPress Accelerated Mobile Pages plugin <= 1.0.96.1 - Broken Access Control vulnerability6.3 Medium
- roundup wp registrations for the events calendarWordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability6.4 Medium
- ncrafts formcraftWordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerability4.3 Medium
- bracketspace advanced cron manager – debug & controlWordPress Advanced Cron Manager – debug & control plugin <= 2.5.9 - Broken Access Control vulnerability4.3 Medium
- masteriyo, masteriyo - lms +1 moreWordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability7.5 High
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability4.3 Medium
- masteriyo, masteriyo - lms +1 moreWordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability5.3 Medium
- bitlyWordPress Bitly's WordPress Plugin plugin <= 2.7.2 - Broken Access Control vulnerability6.5 Medium
- matt miller send emails with mandrillWordPress Send Emails with Mandrill plugin <= 1.4.1 - Broken Access Control vulnerability4.3 Medium
- pluginops mailchimp subscribe formsWordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability5.9 Medium
- creativemotion social slider feedWordPress Social Slider Feed plugin <= 2.2.2 - Broken Access Control vulnerability4.3 Medium
- magepeople wptravellyWordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability7.5 High
- eventprime events eventprimeWordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability4.3 Medium
- Show moreLoading…