CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- woopy plugins smartlink dynamic urlsWordPress SmartLink Dynamic URLs plugin <= 1.1.0 - CSRF to Stored XSS vulnerability7.1 High
- kevin stover ninja formsWordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpxpo postxWordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- adamskaat countdown & clockWordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- kevin stover ninja formsWordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- idsk team id-sk toolkitWordPress ID-SK Toolkit plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- josh kohlbach jigoshop – store exporterWordPress Jigoshop – Store Exporter plugin <= 1.5.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- common ninja pricer ninjaWordPress Pricer Ninja plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- alleythemes alley elementor widgetWordPress Alley Elementor Widget plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- peter j. herrel ancient world linked dataWordPress Ancient World Linked Data plugin <= 0.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kyle m brown step by stepWordPress Step by Step plugin <= 0.4.5 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- redy ru wechat subscribers liteWordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- intuitive design gdresellerWordPress GDReseller plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- irfan ardiansah show visitor ip addressWordPress Show Visitor IP Address plugin <= 0.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- stefano marra smart mockupsWordPress Smart Mockups plugin <= 1.2.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- enea overclokk advanced control manager for wordpress by italystrapWordPress Advanced Control Manager plugin <= 2.16.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- demixpress (dp) addthisWordPress (dp) AddThis plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- amazing team neo icon font for elementor, mudssar amazing neo icon font for elementor +1 moreWordPress amazing neo icon font for elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- zach silberstein rlm elementor widgets packWordPress RLM Elementor Widgets Pack plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- print reach, inc. myorderdeskWordPress MyOrderDesk plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- auburnforest datamentorWordPress DataMentor plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mahodder themedy toolboxWordPress Themedy Toolbox plugin <= 1.0.16 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bonway services static block editor, steven nolles bonway static block editor +1 moreWordPress Bonway Static Block Editor plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- abdullah nahian awesome progress barWordPress Awesome Progress Bar plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jason pancake hover video previewWordPress Hover Video Preview plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- alessandro staniscia endomondowpWordPress EndomondoWP plugin <= 0.1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- sidedWordPress Sided plugin <= 1.4.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- classy addons for elementorWordPress Classy Addons for Elementor plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- clypWordPress Clyp plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- md. mamunur roshid wm zoomWordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bytelabx pdf embedder fayWordPress Pdf Embedder Fay plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- notfound storelyWordPress Storely theme <= 14.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shahjahan jewel trendy restaurant menuWordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- surbma | font awesomeWordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- md. shiddikur rahman ultimate accordionWordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jake brown brand my footerWordPress Brand my Footer plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vadim bogaiskov bg patriarchia buWordPress Bg Patriarchia BU plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- magnetic creative inline click to tweetWordPress Inline Click To Tweet plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bread & butter & butterWordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yonatan reinberg yphplistaWordPress yPHPlista plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- bob matsuoka moka get posts shortcodeWordPress Moka Get Posts Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shingo awesome fitness testimonialsWordPress Awesome Fitness Testimonials plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pat o’brien codesnipsWordPress codeSnips plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- black and white agendapress – easily publish meeting agendas and programs on wordpressWordPress AgendaPress plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- george lewe lewe bootstrap visualsWordPress Lewe Bootstrap Visuals plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- george rood keymaster chord notation freeWordPress Keymaster Chord Notation Free plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- wasim pro addons for elementorWordPress Pro Addons For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hussam hussien popup imageWordPress Popup Image plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- anantaddons anant addons for elementorWordPress Anant Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- saul morales pacheco banner systemWordPress Banner System plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…