CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- mario di pasquale svegliat buttons WordPress SvegliaT Buttons Plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- ibnuyahya category post shortcode WordPress Category Post Shortcode Plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- royal-elementor-addons royal elementor addons WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- ghostty-org ghostty Ghostty improperly handles window title sequences which can lead to arbitrary command execution 5.1 Medium
- phpgurukul land record system PHPGurukul Land Record System login.php sql injection 6.9 Medium
- phpgurukul land record system PHPGurukul Land Record System search-property.php sql injection 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System admin-profile.php cross site scripting 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System search-property.php cross site scripting 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System contactus.php cross site scripting 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System aboutus.php cross site scripting 5.1 Medium
- phpgurukul land record system PHPGurukul Land Record System property-details.php sql injection 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System index.php sql injection 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System add-property.php cross site scripting 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System edit-propertytype.php cross site scripting 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System add-propertytype.php cross site scripting 5.3 Medium
- phpgurukul land record system PHPGurukul Land Record System index.php cross site scripting 5.3 Medium
- trend micro, inc. micro deep security, trendmicro deep security agent +1 more An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents... 6.7 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to... 7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more A security agent link following vulnerability in Trend Micro Apex One could allow a local... 7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to... 7.8 High
- trend micro, inc. micro id security, trendmicro id security +1 more Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an... 6.5 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local... 7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to... 7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more A LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to... 7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more A widget local file inclusion vulnerability in Trend Micro Apex One could allow a remote attacker... 7.5 High
- cabraviva path-sanitizer path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability 9.3 Critical
- pacovk tapir Tapir allows DeployKey exposure 8.7 High
- 1000 projects beauty parlour management system 1000 Projects Beauty Parlour Management System Customer Detail add-customer-services.php sql injection 5.3 Medium
- codeastro online food ordering system CodeAstro Online Food Ordering System Update User Page update_users.php sql injection 5.3 Medium
-
github.com/openshift/hiveGo,govulncheck-vulndbopenSUSE +1 more Openshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation 8.8 High - ffmpeg Ffmpeg: null pointer dereference in ffmpeg hls parsing 7.5 High
- ffmpeg Ffmpeg: improper handling of input format in tty demuxer of ffmpeg 5.3 Medium
- fatcatapps landing page cat WordPress Landing Page Cat plugin <= 1.7.4 - Broken Access Control vulnerability 5.4 Medium
- storeapps smart manager WordPress Smart Manager plugin <= 8.45.0 - Broken Access Control vulnerability 4.3 Medium
- imw3 my wp brand WordPress My Wp Brand – Hide menu & Hide Plugin plugin <= 1.1.2 - Broken Access Control vulnerability 5.3 Medium
- pricelisto best restaurant menu by pricelisto WordPress Great Restaurant Menu WP plugin <= 1.4.2 - Broken Access Control vulnerability 4.3 Medium
- david de boer paytium WordPress paytium plugin <= 4.4.10 - Broken Access Control vulnerability 4.3 Medium
- torod company for information technology torod WordPress Torod plugin <= 1.7 - Settings Change vulnerability 6.5 Medium
- mightyforms contact form, survey & form builder – mightyforms WordPress Contact Form, Survey & Form Builder – MightyForms plugin <= 1.3.9 - Broken Access Control vulnerability 6.4 Medium
- azzaroco wp superbackup WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilities 7.4 High
- editionguard for woocommerce – ebook sales with drm WordPress EditionGuard for WooCommerce – eBook Sales with DRM plugin <= 3.4.2 - CSRF to Privilege Escalation vulnerability 8.8 High
- amarjeet amar gap-hub-user-role WordPress gap-hub-user-role. plugin <= 3.4.1 - CSRF to Broken Authentication vulnerability 8.8 High
- yonatan reinberg of social ink sinking dropdowns WordPress Sinking Dropdowns plugin <= 1.25 - CSRF to Privilege Escalation vulnerability 8.8 High
- george holmes ii wayne audio player WordPress Wayne Audio Player plugin <= 1.0 - CSRF to Privilege Escalation vulnerability 8.8 High
- inspry agency toolkit WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability 9.8 Critical
- ateeq rafeeq repairbuddy WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability 8.8 High
- vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability 9.3 Critical
- vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability 9.8 Critical
- vibethemes wplms, wordpress learning management system +1 more WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability 9.8 Critical
- Show olderLoading…