CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- cs123 twentytwentyTwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- jerryscg gold addons for elementorGold Addons for Elementor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) License Activation/Deactivation4.3 Medium
- iamjonasmarlo cookielayCookielay <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cookielay Shortcode6.4 Medium
- onlyoffice docsONLYOFFICE Docs <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- nanard33 splash syncSplash Sync <= 2.0.7 - Reflected Cross-Site Scripting6.1 Medium
- edgarrojas pdf builder for woocommerce. create invoices,packing slips and morePDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting6.1 Medium
- kofimokome message filter for contact form 7Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions4.3 Medium
- dactum clickbank wordpress plugin (storefront)Clickbank WordPress Plugin (Storefront) <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- autoquiz ai quiz, kekotron ai quiz | quiz maker +1 moreAI Quiz | Quiz Maker <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update8.8 High
- sasonikolov event tickets with ticket scannerEvent Tickets with Ticket Scanner <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting5.4 Medium
- rstheme ultimate coming soon & maintenance, ultimate coming soon \& maintenance +1 moreUltimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Template Name Update4.3 Medium
- desertthemes newsmashNewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- cluevo lms, e-learning platformCLUEVO LMS, E-Learning Platform <= 1.13.2 - Cross-Site Request Forgery to Module Deletion4.3 Medium
- nimeshrmr wp private content plus, wordpress wp private content plus plugin +1 moreWP Private Content Plus <= 3.6.1 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- francescosganga wp media optimizer (.webp)WP Media Optimizer (.webp) <= 1.4.0 - Reflected Cross-Site Scripting via wpmowebp-css-resources and wpmowebp-js-resources Parameters6.1 Medium
- ultimatemember forumwp, forumwp – forum & discussion board +1 moreForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting6.1 Medium
- mikeyott wp systemWP System <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- india-web-developer login with otp, wordpress login with otp plugin +1 moreLogin With OTP <= 1.4.2 - Authentication Bypass via Weak OTP8.1 High
- sanil sticky social icons, sticky social icons social icons +1 moreSticky Social Icons <= 1.2.1 - Admin+ Stored XSS4.8 Medium
- unknown 3dprint lite3DPrint Lite < 2.1 - Settings Update via CSRF4.3 Medium
- nsp-code wp hide & security enhancer, wp hide \& security enhancer +1 moreWP Hide & Security Enhancer <= 2.5.1 - Missing Authorization to Unauthenticated Arbitrary File Contents Deletion7.5 High
- blazethemes pubnewsPubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation8.8 High
- saadiqbal points management system for gamification, ranks, badges, and loyalty rewards program – mycredmyCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode6.4 Medium
- edward plainview broadcastBroadcast <= 51.01 - Reflected Cross-Site Scripting6.1 Medium
- total-soft video gallery, totalsoft video gallery – youtube gallery, vimeo, video portfolio, image portfolio and image gallery, video gallery youtube gallery and vimeo gallery +2 moreYouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection7.2 High
- total-soft video gallery, totalsoft video gallery – youtube gallery, vimeo, video portfolio, image portfolio and image gallery +1 moreVideo Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- themesdaddy flixitaFlixita <= 1.0.82 - Reflected Cross-Site Scripting via id Parameter6.1 Medium
- openbsdOpenBSD vmm GDTR limits6.2 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- phpgurukul covid 19 testing management systemA Reflected Cross Site Scripting (XSS) vulnerability was found in /covidtms/registered-user...6.1 Medium
- ui u6-lr firmwareUbiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow...9.8 Critical
- No product listedUbiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc...7.5 High
- wavlink wn531p3 firmwareWAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc...9.8 Critical
- wavlink wn701ae firmwareWAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in ...9.8 Critical
- oroinc oroplatform, orocommerce +1 moreA cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute...6.1 Medium
- anujk305 medical card generation systemPhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting (XSS) in ...4.8 Medium
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a...7.5 High
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a...7.5 High
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a...7.5 High
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a...7.5 High
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemInsecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v...9.8 Critical
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- openrobotics robot operating systemOpen Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to...9.8 Critical
- Show moreLoading…