CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- noah hearle, design extreme we’re open!WordPress We’re Open! plugin <= 1.45 - Broken Access Control vulnerability4.3 Medium
- wp onlinesupport, essential plugin album and image gallery plus lightboxWordPress Album and Image Gallery plus Lightbox plugin <= 1.6.2 - Broken Access Control vulnerability5.3 Medium
- nate reist protected posts logout button, wordpress nate reist protected posts logout button +1 moreWordPress Protected Posts Logout Button plugin <= 1.4.5 - Broken Access Control vulnerability6.5 Medium
- miniorange wordpress social login and register (discord, google, twitter, linkedin), wordpress social login and register \(discord\, google\, twitter\, linkedin\) +1 moreWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerability5.3 Medium
- magazine3 easy table of contentsWordPress Easy Table of Contents plugin <= 2.0.45.2 - Broken Access Control vulnerability5.4 Medium
- essential plugin meta slider and carousel with lightboxWordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerability5.3 Medium
- migrate cloneWordPress Clone plugin <= 2.3.7 - Broken Access Control vulnerability4.3 Medium
- fullworks quick paypal paymentsWordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability7.5 High
- cadus pro fontiranWordPress Fontiran plugin <= 2.1 - Broken Access Control vulnerability5.4 Medium
- apollo13themes apollo13 framework extensionsWordPress Apollo13 Framework Extensions plugin <= 1.8.10 - Broken Access Control5.4 Medium
- ninja team filebirdWordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability5.5 Medium
- advanced text widget project text widget, max chirkov advanced text widget +1 moreWordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability5.3 Medium
- ajay top 10WordPress Top 10 – Popular posts plugin for WordPress plugin <= 3.2.3 - Broken Access Control vulnerability4.3 Medium
- onewebsite wp repostWordPress WP Repost plugin <= 0.1 - Broken Access Control vulnerability6.5 Medium
- damir calusic wp users mediaWordPress WP users media plugin <= 4.2.3 - Broken Access Control vulnerability5.4 Medium
- totalsuite total poll liteWordPress Total Poll Lite plugin <= 4.8.6 - Broken Access Control vulnerability6.3 Medium
- apollo13themes rife elementor extensions & templatesWordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerability5.4 Medium
- aleksandar urošević stock tickerWordPress Stock Ticker plugin <= 3.23.0 - Broken Access Control vulnerability5.3 Medium
- paul ryley site reviewsWordPress Site Reviews plugin <= 6.5.0 - Broken Access Control vulnerability4.3 Medium
- tech banker backup bank: wordpress backup pluginWordPress Backup Bank: WordPress Backup Plugin plugin <= 4.0.28 - Broken Access Control vulnerability4.3 Medium
- jerod santo wordpress consoleWordPress WordPress Console plugin <= 0.3.9 - Broken Access Control vulnerability3.7 Low
- sparkle themes chankheWordPress Chankhe theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation vulnerability4.3 Medium
- wpdirectorykit.com real estate directoryWordPress Real Estate Directory theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation4.3 Medium
- alexacrm dynamics 365 integrationWordPress Dynamics 365 Integration plugin <= 1.3.12 - Broken Access Control vulnerability5.4 Medium
- acato branded social imagesWordPress Branded Social Images plugin <= 1.1.0 - Broken Access Control vulnerability5.3 Medium
- themehunk th variation swatches, variation swatches +1 moreWordPress TH Variation Swatches plugin <= 1.2.7 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- joomsky js job managerWordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability6.5 Medium
- muhammad rehman remove duplicate postsWordPress Remove Duplicate Posts plugin <= 1.3.5 - Broken Access Control vulnerability6.3 Medium
- awesome togi product category treeWordPress Product Category Tree plugin <= 2.5 - Broken Access Control vulnerability5.3 Medium
- luckywp scripts controlWordPress LuckyWP Scripts Control plugin <= 1.2.1 - Broken Access Control vulnerability5.4 Medium
- alexacrm dynamics 365 integrationWordPress Dynamics 365 Integration plugin <= 1.3.13 - Broken Access Control vulnerability4.3 Medium
- wpeverest user registrationWordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability5.3 Medium
- onthegosystems qtranslate x cleanup and wpml importWordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability4.3 Medium
- 腾讯云 tencentcloud-cosWordPress tencentcloud-cos plugin <= 1.0.7 - Broken Access Control vulnerability5.4 Medium
- stamped, stamped.io product reviews & ugc for woocommerce +1 moreWordPress Stamped.io Product Reviews & UGC for WooCommerce plugin <= 2.3.2 - Broken Access Control vulnerability5.3 Medium
- sparkle themes blogger buzzWordPress Blogger Buzz theme <= 1.2.2 - Broken Access Control vulnerability4.3 Medium
- hashthemes squareWordPress Square theme <= 2.0.0 - Broken Access Control4.3 Medium
- essential plugin featured post creativeWordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability5.3 Medium
- easy-appointments easy appointmentsWordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.3 Medium
- wooproductimporter sharkdropship for aliexpress dropship and affiliate, sharkdropship dropshipping and affiliate +1 moreWordPress Sharkdropship for AliExpress Dropship and Affiliate plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities6.5 Medium
- yummywp smart woocommerce searchWordPress Smart WooCommerce Search plugin <= 2.5.0 - Broken Access Control4.3 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 1.9.8 - Broken Access Control5.4 Medium
- jose vega display custom fields in the frontend – post and user profile fieldsWordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability4.3 Medium
- arul prasad j wp quick post duplicatorWordPress WP Quick Post Duplicator plugin <= 2.0 - Broken Access Control vulnerability5.4 Medium
- felix welberg extended post statusWordPress Extended Post Status plugin <= 1.0.19 - Broken Access Control vulnerability5.4 Medium
- prince integrate google driveWordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability9.8 Critical
- realwebcare wrc pricing tablesWordPress WRC Pricing Tables plugin <= 2.3.7 - Broken Access Control vulnerability5.3 Medium
- wpoperation salertWordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability4.3 Medium
- anzar ahmed ni woocommerce sales reportWordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability6.5 Medium
- appsbd mini cart drawer for woocommerceWordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability5.4 Medium
- Show moreLoading…