CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability7.5 High
- gemini labs site reviewsWordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability5.3 Medium
- marcus (aka @msykes) login with ajaxWordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability4.3 Medium
- metaphor creations post duplicatorWordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability4.3 Medium
- austin custom loginWordPress Custom Login plugin <= 4.1.0 - Broken Access Control vulnerability4.3 Medium
- marc dooder sharkdropship dropshipping for aliexpress, ebay, amazon, etsy, wooproductimporter sharkdropship dropshipping and affiliate +1 moreWordPress Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy plugin <= 2.1.1 - Broken Access Control vulnerability6.5 Medium
- aakash chakravarthy shortcoderWordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerability4.3 Medium
- ashish ajani wp simple html sitemapWordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vulnerability5.3 Medium
- ilmdesigns square thumbnailsWordPress Square Thumbnails plugin <= 1.1.1 - Broken Access Control + CSRF vulnerability5.3 Medium
- edgarrojas smart formsWordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability8.1 High
- awesomesupport awesome support, awesome support wordpress helpdesk \& support +1 moreWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability6.5 Medium
- wpsaad alt managerWordPress Alt Manager plugin <= 1.6.1 - Broken Access Control vulnerability5.3 Medium
- woobewoo product filter by wbwWordPress Product Filter by WBW plugin <= 2.5.0 - Broken Access Control vulnerability4.3 Medium
- edo888 google language translatorWordPress Translate WordPress – Google Language Translator plugin <= 6.0.19 - Broken Access Control vulnerability5.3 Medium
- molonguiWordPress Molongui plugin <= 4.7.3 - Broken Access Control vulnerability4.3 Medium
- profilepressWordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability5.3 Medium
- la-studio element kit for elementor, lastudio la-studio element kit for elementor +1 moreWordPress LA-Studio Element Kit for Elementor plugin <= 1.1.5 - Broken Access Control vulnerability6.5 Medium
- syed balkhi user feedback, userfeedback +1 moreWordPress User Feedback plugin <= 1.0.10 - Broken Access Control vulnerability5.3 Medium
- multivendorx product catalog enquiry for woocommerce by multivendorxWordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability5.4 Medium
- ays pro poll maker, poll maker team maker +1 moreWordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability5.3 Medium
- roxnor metform, wpmet metform elementor contact form builder +1 moreWordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability5.3 Medium
- supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability5.3 Medium
- multivendorx, multivendorx wc marketplace +1 moreWordPress MultiVendorX plugin <= 4.0.23 - Broken Access Control vulnerability8.2 High
- conversios conversios.ioWordPress Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin <= 6.5.0 - Broken Access Control vulnerability5.3 Medium
- wpdeveloper essential blocks for gutenberg, essential blocks +1 moreWordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability6.5 Medium
- wpdeveloper essential blocks for gutenberg, essential blocks +1 moreWordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability5.4 Medium
- gal dubinski my sticky elements, premio all in one floating contact form my sticky elements +1 moreWordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerability5.3 Medium
- loud dog redirectsWordPress Redirects plugin <= 1.2.1 - Broken Access Control vulnerability5.3 Medium
- apache subversion, debian linux +1 moreApache Subversion: mod_dav_svn denial-of-service via control characters in paths3.1 Low
- unifiedtransformFunction-Level Access Control Vulnerability Allows Unauthorized Modification of Student Data in Unifiedtransform4.3 Medium
- unifiedtransformAccess Control Vulnerabilities Allow Unauthorized Access to User Profiles in Unifiedtransform4.3 Medium
- unifiedtransformObject-Level Access Control Vulnerability Allows Unauthorized Access to Student Grades in Unifiedtransform4.3 Medium
- fluentforms contact form, unknown fluent forms +1 moreContact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS6.1 Medium
- code-projects online class and exam scheduling system, online class and exam scheduling system project class and exam scheduling system +1 morecode-projects Online Class and Exam Scheduling System class_update.php sql injection5.3 Medium
- code-projects admin dashboardcode-projects Admin Dashboard vendor_management.php cross site scripting5.3 Medium
- datax-web project datax-webWeiYe-Jing datax-web add os command injection5.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System index.php file inclusion6.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- synology router manager, router manager (srm) +1 moreImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- razormist phone contact manager systemSourceCodester Phone Contact Manager System ContactBook.cpp adding input validation4.8 Medium
- razormist phone contact manager system, sourcecodester phone shop sales managements system using php with source code +1 moreSourceCodester Phone Contact Manager System User Menu MenuDisplayStart buffer overflow4.8 Medium
- razormist phone contact manager systemSourceCodester Phone Contact Manager System User Menu MenuDisplayStart input validation4.8 Medium
- totolink ex1800t, ex1800t firmware +1 moreTOTOLINK EX1800T cstecgi.cgi sub_40662C stack-based overflow5.3 Medium
- heyewei jfinalcmsJFinalCMS File Content ContentModel.java findPage sql injection5.3 Medium
- heyewei jfinalcmsJFinalCMS Template TemplateController.java update command injection5.3 Medium
- Show moreLoading…