CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- august infotech ai responsive gallery albumWordPress AI Responsive Gallery Album plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dhrubok infotech woocommerce price alertWordPress WooCommerce Price Alert plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- docxpresso document & data automationWordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability7.1 High
- stefan bohacek fediverse embedsWordPress Fediverse Embeds plugin <= 1.5.3 - Arbitrary File Upload vulnerability10.0 Critical
- astoundify jobifyWordPress Jobify plugin < 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- astoundify jobifyWordPress Jobify theme < 4.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- igor benic leanpressWordPress LeanPress plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- orttoWordPress Ortto plugin <= 1.0.19 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- solverwp elementor portfolio builderWordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- deepintowp wc recently viewed productsWordPress Wc Recently viewed products plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webcodingplace ultimate classified listingsWordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sanil shakya sticky social iconsWordPress Sticky Social Icons plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability5.9 Medium
- udi dollberg add chat app buttonWordPress Add Chat App Button plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- josh leuze meteor slides, meteor slides project slides +1 moreWordPress Meteor Slides plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gopi ramasamy image horizontal reel scroll slideshowWordPress Image horizontal reel scroll slideshow plugin <= 13.4 - Stored Cross Site Scripting (XSS) vulnerability5.9 Medium
- imbasynergy imbachatWordPress ImbaChat plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- matt varone, tim berneman dynamic "to top"WordPress Dynamic To Top plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- tailored media toolsWordPress Tailored Tools plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- autoquiz ai quizWordPress AI Quiz plugin <= 1.1 - Broken Access Control vulnerability5.3 Medium
- ahmet imamoglu ahmeti wp güzel sözler, ahmeti wp güzel sözler +1 moreWordPress Ahmeti Wp Güzel Sözler plugin <= 4.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- iterasWordPress ITERAS plugin <= 1.8.0 - CSRF to Stored XSS vulnerability7.1 High
- nasir uddin generic elementsWordPress Generic Elements plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kevin mccabe kevin'sWordPress Kevin's plugin <= 2.0.0 - CSRF to Stored XSS vulnerability7.1 High
- jean-marc bianca hotlink2watermarkWordPress Hotlink2Watermark plugin <= 0.3.2 - CSRF to Stored XSS vulnerability7.1 High
- arrow design continue shopping from cartWordPress Continue Shopping From Cart plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- alain diart for les-sushi-codeurs.fr & eric ambrosi for regart.net silverlight video playerWordPress Silverlight Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- overtrue wp auto topWordPress wp auto top plugin <= 2.9.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- thomas hoefter simple travel mapWordPress Simple Travel Map plugin <= 0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- eric teubert multi feed readerWordPress Multi Feed Reader plugin <= 2.2.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- yonatan reinberg yphplistaWordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- onigetoc zajax – ajax navigationWordPress Zajax – Ajax Navigation plugin <= 0.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- stachethemes advanced event managerWordPress Advanced Event Manager plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ole1986 wp-ispconfig 3WordPress WP-ISPConfig 3 plugin <= 1.5.6 - CSRF to Stored XSS vulnerability7.1 High
- a.cihangir baltaci google plus share and +1 buttonWordPress Google Plus Share and +1 Button plugin <= 1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- rockemmusic favicon my blogWordPress Favicon My Blog plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- amit post hits counterWordPress Post Hits Counter plugin <= 2.8.23 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ronny l. bull icestatsWordPress IceStats plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- lars koudal linklaunder seoWordPress LinkLaunder SEO plugin <= 0.92.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- realty candy realtycandy idx broker extendedWordPress RealtyCandy IDX Broker Extended plugin <= 1.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- oliver lindner protect your contentWordPress Protect Your Content plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- plumeria web design blizzard quotesWordPress Blizzard Quotes plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- garrett grimm simple popupWordPress Simple Popup plugin <= 4.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cultbooking hotel booking engineWordPress CultBooking Hotel Booking Engine plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- buildapp build app onlineWordPress Build App Online plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- andrea pernici third party cookie eraserWordPress Third Party Cookie Eraser plugin <= 1.0.2 - CSRF to Cross Site Scripting (XSS) vulnerability7.1 High
- arrow design out of stock badgeWordPress Out Of Stock Badge plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- planet studio arca payment gatewayWordPress ArCa Payment Gateway plugin <= 1.3.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- fasterthemes fastbookWordPress FastBook plugin <= 1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- p roy wp revisions managerWordPress WP Revisions Manager plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- lriaudel custom post type to map storeWordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability7.1 High
- Show moreLoading…