CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- santhosh veer stylish internal linksWordPress Stylish Internal Links plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sohelwpexpert wp responsive videoWordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mage cast front end forms, maximilian ruthe mage front end forms +1 moreWordPress Mage Front End Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- marty thornley photographer connectionsWordPress Photographer Connections plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- step-security harden-runner, step security harden runner +1 moreHarden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts`2.7 Low
- offshorent solutions pvt ltd os our teamWordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- offshorent solutions pvt ltd os bxsliderWordPress OS BXSlider plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- offshorent softwares pvt. ltd. | jinesh.p.v os pricing tablesWordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- codeies pvt ltd provide forex signalsWordPress Provide Forex Signals plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- roberto alicata ra qrcodeWordPress ra_qrcode plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- javier méndez veira simplegmapsWordPress SimpleGMaps plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp website creator website remote install vor gravity, wpforms, formidable, ninja, calderaWordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aa extensions audio player, aaextention aa audio player +1 moreWordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- oracle corporation agile plm framework, oracle agile product lifecycle management (plm), agile product lifecycle management +2 moreVulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component:...7.5 High
- md. shiddikur rahman awesome tool tipWordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- automattic google for woocommerce, woocommerce +1 moreGoogle for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File5.3 Medium
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- greg ross cyan backupWordPress CYAN Backup plugin <= 2.5.3 - Arbitrary File Download vulnerability4.9 Medium
- verkkovaraani print pdf generator and publisherWordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- boldthemes reconstructionWordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cactusthemes gameplanWordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- autolabAutolab has HTML Injection Vulnerability1.2 Low
- autolabAutolab has vulnerable submission endpoints4.9 Medium
- definetlynotai weshacksWesHacks code includes links to Leostop tracking spyware infested files8.2 High
- aio-libs aiohttpaiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions6.3 Medium
- aio-libs aiohttp, aiohttp aio-libs +1 moreaiohttp memory leak when middleware is enabled when requesting a resource with a non-allowed method8.7 High
- markusproject markusArbitrary File Write leading up to remote code execution (instructor accounts)7.1 High
- graylog, graylog2 graylog2-server +1 moreGraylog can leak other users' reports via concurrent PDF report rendering7.1 High
- markusproject markusMarkUs Arbitrary File Write leading up to remote code execution (student accounts)7.1 High
- phpoffice phpspreadsheetXXE in PHPSpreadsheet's XLSX reader7.5 High
- phpoffice phpspreadsheetPhpSpreadsheet XmlScanner bypass leads to XXE7.5 High
- markusproject markusMarkUs vulnerable to Path Traversal5.7 Medium
- elfsight telegram chat ccElfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- glpi-project glpiGLPI vulnerable to enumeration of users' email addresses by unauthenticated user7.5 High
- cisco catalyst sd-wan managerCisco SD-WAN vManage Software XML External Entity Vulnerability6.5 Medium
- cisco webex teamsCisco Webex Teams Web Interface Cross-Site Scripting Vulnerability5.4 Medium
- clipboard agency copy anything to clipboardWordPress Copy Anything to Clipboard plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cisco unified computing system (managed), unified computing system +1 moreCisco Integrated Management Controller Username Enumeration Vulnerability5.3 Medium
- cisco unified computing system (managed), unified computing system +1 moreCisco Integrated Management Controller Software Authorization Bypass Vulnerability5.4 Medium
- terry l. wp githuber mdWordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cisco catalyst sd-wan manager, sd-wan vcontainer, sd-wan vedge cloud +1 more +3 moreCisco SD-WAN vEdge Arbitrary File Creation Vulnerability8.4 High
- themify builder, themifyme themify builder +1 moreWordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +2 moreCisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability8.6 High
- cisco unified communications managerCisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco small business rv series router firmwareCisco Small Business RV Series Routers Cross-Site Scripting Vulnerability6.1 Medium
- suresh kumar wp-login customizerWordPress wp-login customizer plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- cisco catalyst sd-wan managerCisco SD-WAN vManage Directory Traversal Vulnerability7.5 High
- cisco catalyst sd-wan managerCisco SD-WAN vManage Privilege Escalation Vulnerability7.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability4.3 Medium
- cisco unified communications manager, unity connection, unified communications manager / cisco unity connection +1 more +3 moreCisco Unified Communications Products Cross-Site Scripting Vulnerability6.1 Medium
- Show moreLoading…