CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability5.3 Medium
- unknown advanced custom fields proWordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability5.4 Medium
- unknown advanced custom fields proWordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability4.3 Medium
- envira gallery team photo galleryWordPress Envira Photo Gallery plugin <= 1.8.7.3 - CSRF leading to notice dismissal vulnerability4.3 Medium
- popup box team box, unknown popup box +1 moreWordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability4.3 Medium
- membership software wishlist member x, wishlist products member x +1 moreWordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability7.7 High
- membership software wishlist member x, wishlist products member x +1 moreWordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability8.2 High
- vowelweb ibtanaWordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability5.3 Medium
- uncanny owl automator pro, uncannyowl uncanny automator +1 moreWordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability5.3 Medium
- javmah woocommerce customers order historyWordPress Woocommerce Customers Order History plugin <= 5.2.2 - Broken Access Control vulnerability4.3 Medium
- property hive propertyhiveWordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability4.3 Medium
- laybuy payment extension for woocommerceWordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerability4.3 Medium
- romik84 demo awesomeWordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability5.4 Medium
- dropshipping guru ali2woo liteWordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability6.5 Medium
- optinlyWordPress Optinly plugin <= 1.0.18 - Broken Access Control vulnerability5.3 Medium
- pbn hosting sl page builder sandwich – front-end page builderWordPress Page Builder Sandwich <= 5.1.0 - Broken Access Control vulnerability4.3 Medium
- kanban for wordpress boards for wordpress, kanbanwp kanban boards for wordpress +1 moreWordPress Kanban Boards for WordPress plugin <= 2.5.21 - Broken Access Control vulnerability5.3 Medium
- mndpsingh287 file managerWordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability4.3 Medium
- hercules design core, themesinflow hercules core +1 moreWordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability8.8 High
- stylemixthemes masterstudy elementor widgetsWordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability5.3 Medium
- roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 moreWordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability5.3 Medium
- fifu featured image from urlWordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability5.3 Medium
- emilia progress planner, progress planner planner +1 moreWordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability5.3 Medium
- paid memberships pro memberships pro, paidmembershipspro paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- e2pdfWordPress E2Pdf plugin <= 1.20.27 - Broken Access Control vulnerability5.4 Medium
- automattic newspack blocksWordPress Newspack Blocks plugin <= 3.0.8 - Broken Access Control vulnerability5.4 Medium
- automattic newspack blocksWordPress Newspack Blocks plugin <= 3.0.8 - Contributor+ Arbitrary Directory Deletion vulnerability8.5 High
- uncanny owl toolkit pro for learndash, uncannyowl uncanny toolkit pro for learndash +1 moreWordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability5.4 Medium
- arraytics timeticsWordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability5.3 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability4.3 Medium
- unknown defender security, wpmudev defender +1 moreWordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability5.3 Medium
- automattic wp job manager - resume managerWordPress WP Job Manager plugin <= 2.1.0 - Broken Access Control vulnerability4.3 Medium
- metagauss profilegridWordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerability4.3 Medium
- crm perks forms, crmperks crm perks forms +1 moreWordPress CRM Perks Forms plugin <= 1.1.5 - Broken Access Control vulnerability5.3 Medium
- brian mutende noptinWordPress Simple Newsletter Plugin – Noptin plugin <= 3.4.2 - Broken Access Control vulnerability5.3 Medium
- wofficeio woffice core, xtendify woffice +1 moreWordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability8.2 High
- blazethemes newsmaticWordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability5.3 Medium
- automattic newspack newslettersWordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability5.3 Medium
- radiustheme the post gridWordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability6.5 Medium
- automattic newspack content converterWordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerability6.5 Medium
- radiustheme the post gridWordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability4.3 Medium
- rara themes business one pageWordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability4.3 Medium
- radiustheme the post gridWordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability5.4 Medium
- charitable donations & fundraising team charitableWordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability6.5 Medium
- charitable donations & fundraising team charitableWordPress Donation Forms by Charitable plugin <= 1.8.1.7 - Broken Access Control vulnerability5.3 Medium
- fifu.app featured image from urlWordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability6.3 Medium
- kiboko labs chained quizWordPress Chained Quiz plugin <= 1.3.2.8 - Broken Access Control vulnerability5.3 Medium
- brainstorm force spectraWordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability4.3 Medium
- solwin user activity log proWordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability6.3 Medium
- alex volkov wp accessibility helper (wah), volkov wp accessibility helper +1 moreWordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability5.3 Medium
- Show moreLoading…