CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- artisanworkshop japanized for woocommerceWordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability8.6 High
- david vongries welcome email editorWordPress Welcome Email Editor plugin <= 5.0.6 - Broken Access Control vulnerability4.3 Medium
- wpdeveloper essential blocks for gutenberg, essential blocks +1 moreWordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability4.3 Medium
- wpdeveloper simple 301 redirects by betterlinksWordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability4.3 Medium
- northern beaches websites wp custom admin interfaceWordPress WP Custom Admin Interface plugin <= 7.31 - Broken Access Control vulnerability4.3 Medium
- wpdeveloper betterdocsWordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability4.3 Medium
- metaphorcreations dittyWordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability6.5 Medium
- miniorange otp verificationWordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerability4.3 Medium
- easyazonWordPress EasyAzon – Amazon Associates Affiliate Plugin plugin <= 5.1.0 - Broken Access Control vulnerability4.3 Medium
- acme themes fix images, acmethemes acme fix images +1 moreWordPress Acme Fix Images plugin <= 1.0.0 - Broken Access Control vulnerability4.3 Medium
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability5.3 Medium
- crudlab wp like buttonWordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability4.3 Medium
- sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 moreWordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability5.4 Medium
- ncrafts formcraftWordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability5.3 Medium
- nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor, restaurant and cafe addon for elementor +2 moreWordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability6.5 Medium
- addons for contact form 7 live preview for contact form 7WordPress Live Preview for Contact Form 7 plugin <= 1.2.0 - Broken Access Control vulnerability5.4 Medium
- prasadkirpekar wp meta and date removerWordPress WP Meta and Date Remover plugin <= 2.3.0 - Broken Access Control vulnerability5.4 Medium
- searchiqWordPress SearchIQ plugin <= 4.4 - Broken Access Control vulnerability5.3 Medium
- jules colle conditional fields for contact form 7WordPress Conditional Fields for Contact Form 7 plugin <= 2.4.1 - Broken Access Control vulnerability4.3 Medium
- adnan analytify, analytify - google analytics dashboard +1 moreWordPress Analytify plugin <= 5.1.1 - Broken Access Control vulnerability4.3 Medium
- paytr ödeme ve elektronik para kuruluşu a.ş. taksit tablosuWordPress PayTR Taksit Tablosu plugin <= 1.3.1 - Broken Access Control vulnerability5.3 Medium
- gvectors wpforo forumWordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability4.3 Medium
- blossom themes blossomthemes email newsletterWordPress BlossomThemes Email Newsletter plugin <= 2.2.4 - Broken Access Control vulnerability4.3 Medium
- it path solutions contact form to any apiWordPress Contact Form to Any API plugin <= 1.1.6 - Broken Access Control vulnerability4.3 Medium
- mondial relay woocommerce - wcmultishipping wcmultishippingWordPress WCMultiShipping plugin <= 2.3.5 - Broken Access Control vulnerability6.5 Medium
- mra13 stripe paymentsWordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability8.2 High
- awesomesupport awesome supportWordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability5.4 Medium
- matat technologies textme smsWordPress TextMe SMS plugin <= 1.9.0 - Broken Access Control vulnerability5.4 Medium
- tech banker mail bank - #1 mail smtp plugin for wordpressWordPress Mail Bank – #1 Mail SMTP Plugin for WordPress plugin <= 4.0.14 - Broken Access Control vulnerability4.3 Medium
- easy social feed social feed, easysocialfeed easy social feed +1 moreWordPress Easy Social Feed plugin <= 6.5.1 - Broken Access Control vulnerability4.3 Medium
- void coders elementor post grid addon for elementor page builder, voidthemes void elementor post grid addon for elementor page builder +1 moreWordPress Void Elementor Post Grid Addon for Elementor Page builder plugin <= 2.1.10 - Broken Access Control vulnerability5.3 Medium
- martin gibson ideapushWordPress IdeaPush plugin < 8.58 - Broken Access Control vulnerability5.4 Medium
- thomas scholl canvasio3d lightWordPress canvasio3D Light plugin <= 2.5.0 - Broken Access Control vulnerability5.4 Medium
- 3dweb 360 javascript viewerWordPress 360 Javascript Viewer plugin <= 1.7.11 - Broken Access Control vulnerability6.5 Medium
- wow-company button generator – easily button builder, button generator +1 moreWordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability5.3 Medium
- binh nguyen ladiappWordPress LadiApp plugin <= 4.4 - Broken Access Control lead to XSS vulnerability7.1 High
- godaddy email marketingWordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability4.3 Medium
- code4life database for cf7WordPress Database for CF7 plugin <= 1.2.4 - Broken Access Control vulnerability6.5 Medium
- cl272 enhanced text widgetWordPress Enhanced Text Widget plugin <= 1.6.3 - Broken Access Control vulnerability5.3 Medium
- nerdpress hubbub lite, social pug wordpress +1 moreWordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability5.3 Medium
- importify (dropshipping woocommerce), woocommerce dropshipping +1 moreWordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability5.3 Medium
- pagelayer team pagelayerWordPress Pagelayer plugin <= 1.7.7 - Broken Access Control vulnerability4.3 Medium
- arraytics eventinWordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability5.4 Medium
- pawaryogesh1989 bulk edit post titlesWordPress Bulk Edit Post Titles plugin <= 5.0.0 - Broken Access Control vulnerability4.3 Medium
- b.m. rafiul alam elementor timeline widgetWordPress Elementor Timeline Widget plugin <= 2.2 - Notice Dismissal Vulnerability5.4 Medium
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability5.4 Medium
- roland murg wp booking systemWordPress WP Booking System plugin <= 2.0.19.2 - Broken Access Control vulnerability4.3 Medium
- webflow pagesWordPress Webflow Pages plugin <= 1.0.8 - Broken Access Control vulnerability5.3 Medium
- heolixfy flexible woocommerce checkout field editor, woocommerce checkout field editor +1 moreWordPress Flexible Woocommerce Checkout Field Editor plugin <= 2.0.1 - Broken Access Control vulnerability8.2 High
- socialmediafeather social media featherWordPress Social Media Feather plugin <= 2.1.3 - Broken Access Control vulnerability4.3 Medium
- Show moreLoading…