CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- openstack neutronOpenStack Neutron can use an incorrect ID during policy enforcement7.5 High
- veritas enterprise vaultAn issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It...9.8 Critical
- veritas enterprise vaultAn issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It...9.8 Critical
- veritas enterprise vaultAn issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It...9.8 Critical
- veritas enterprise vaultAn issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It...9.8 Critical
- veritas enterprise vaultAn issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It...9.8 Critical
- veritas enterprise vaultAn issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It...9.8 Critical
- veritas enterprise vaultAn issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It...9.8 Critical
- tonycoz imagerThe Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of...5.5 Medium
- virtualenvvirtualenv allows command injection through activation scripts for a virtual environment7.8 High
- ibm big sql, db2 big sql on cloud pak for data, watson query for cloud pak for data +1 more +3 moreIBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure4.3 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System book_car.php sql injection6.9 Medium
- datagearDataGear resolveSql sql injection5.3 Medium
- codemstory 워드프레스 결제 심플페이 – 우커머스 결제 플러그인워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting pafw_instant_payment Shortcode6.4 Medium
- codemstory 코드엠샵 소셜톡코드엠샵 소셜톡 <= 1.1.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via add_plus_friends and add_plus_talk Shortcodes6.4 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System expedit.php sql injection5.3 Medium
- codemstory 우커머스 네이버페이우커머스 네이버페이 <= 3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via mnp_purchase Shortcode6.4 Medium
- wpbean request a quote, request a quote for woocommerce – get a quote button +1 moreRequest a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form7.3 High
- karzin wishlist for woocommerce: multi wishlists per customer pro, wpfactory wishlist for woocommerce +1 moreWishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter6.1 Medium
- rescue themes shortcodes, rescuethemes rescue shortcodes +1 moreRescue Shortcodes <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rescue_progressbar Shortcode6.4 Medium
- jason c. memberlite shortcodesMemberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode6.4 Medium
- dasinfomedia wpgym - wordpress gym management system, mojoomla wordpress gym management system, dasinfomedia wpgym gym management system +2 moreWPGYM <= 67.1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8 High
- dasinfomedia school management system for wordpress, school management system +1 moreSchool Management <= 91.5.0 - Unauthenticated Arbitrary File Upload9.8 Critical
- dasinfomedia wpgym - wordpress gym management system, mojoomla wordpress gym management system, dasinfomedia wpgym gym management system +2 moreWPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload9.8 Critical
- techjewel fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, google and any smtp provider, wpmanageninja fluentsmtp +1 moreFluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider <= 2.2.82 - Unauthenticated PHP Object Injection9.8 Critical
- fwdesign mp3 sticky playerMP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download7.5 High
- dasinfomedia school management system for wordpress, school management system +1 moreSchool Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload8.8 High
- theafricanboss checkout with cash app on woocommerceCheckout with Cash App on WooCommerce <= 6.0.2 - Reflected Cross-Site Scripting6.1 Medium
- mpol chessgame shizzleChessgame Shizzle <= 1.3.0 - Reflected Cross-Site Scripting6.1 Medium
- wpcodefactory custom css, js & phpCustom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site Scripting6.1 Medium
- codepopular easymedia – increase media upload file size | role-based upload limit | increase execution timeWp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure4.3 Medium
- strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter6.1 Medium
- someguy9 autolisticle: automatically update numbered list articlesAutoListicle: Automatically Update Numbered List Articles <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- algoritmika pdf invoices & packing slips generator for woocommercePDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting6.1 Medium
- hipaatizer hipaa compliant forms with drag’n’drop hipaa form builder. sign hipaa documentsHIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wptravelengine wp travel engine – tour booking plugin – tour operator software, wp travel engine +1 moreWP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update4.3 Medium
- teonos slotti ajanvarausSlotti Ajanvaraus <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- jeffreyvr easy liveblogsEasy Liveblogs <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion8.8 High
- ultimatemember jobboardwp, jobboardwp – job board listings and submissions +1 moreJobBoardWP – Job Board Listings and Submissions <= 1.3.0 - Reflected Cross-Site Scripting6.1 Medium
- themelooks enter addons – ultimate template builder for elementor, enter addons +1 moreEnter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- firecask twitter follow button, alexmoss firecask’s twitter follow button +1 moreTwitter Follow Button <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter6.4 Medium
- meloniq wp-orphanage extendedWP-Orphanage Extended <= 1.2 - Cross-Site Request Forgery to Orphan Account Privilege Escalation8.8 High
- acowebs product table for woocommerce, codeastrology woo product table +1 moreProduct Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure5.3 Medium
- boomdevs tribute testimonials – wordpress testimonial grid/sliderTribute Testimonials – WordPress Testimonial Grid/Slider <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpusermanager wp user manager – user profile builder & membership, wp user manager +1 moreWP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration4.3 Medium
- peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi)Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting6.1 Medium
- oooorgle quotes llamaQuotes llama <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpformation wpdash notesWPDash Notes <= 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure4.3 Medium
- claudeschlesser social login, oneall social login oa-social-login +1 moreSocial Login <= 5.9.0 - Authentication Bypass via Disqus OAuth provider9.8 Critical
- Show moreLoading…