CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- webtoffee wordpress backup & migrationWordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerability4.3 Medium
- wppal easy captchaWordPress Easy Captcha plugin <= 1.0 - Broken Access Control vulnerability6.5 Medium
- tagbox taggboxWordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability5.4 Medium
- a3rev software woocommerce predictive searchWordPress Predictive Search for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability5.3 Medium
- 10up simple page orderingWordPress Simple Page Ordering plugin <= 2.5.0 - Broken Access Control vulnerability5.3 Medium
- booking ultra pro ultra pro, deetronix booking ultra pro +1 moreWordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerability5.4 Medium
- bill minozzi recaptcha for allWordPress reCAPTCHA for all plugin <= 1.22 - Broken Access Control vulnerability4.3 Medium
- gs plugins pins for pinterestWordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability5.4 Medium
- thomas michalak soundcloud is goldWordPress SoundCloud Is Gold plugin <= 2.5.1 - Broken Access Control vulnerability4.3 Medium
- total-soft portfolio gallery – responsive image galleryWordPress Portfolio Gallery – Responsive Image Gallery plugin <= 1.4.6 - Broken Access Control vulnerability7.5 High
- mobilemonkey wp-chatbot for messengerWordPress WP-Chatbot for Messenger plugin <= 4.7 - Broken Access Control5.4 Medium
- fahad mahmood injection guardWordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerability4.3 Medium
- webcodin wcp contact formWordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability7.5 High
- webcodin wcp contact formWordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability4.3 Medium
- mehulkaklotar woo custom emailsWordPress Woo Custom Emails plugin <= 2.2 - Broken Access Control vulnerability7.3 High
- link whisper free, unknown link whisper free +1 moreWordPress Link Whisper Free plugin <= 0.6.3 - Unauthenticated Broken Access Control vulnerability6.5 Medium
- matthew ruddy easing sliderWordPress Easing Slider plugin <= 3.0.8 - Plugin Settings Reset Vulnerability7.5 High
- hashthemes viral magWordPress Viral Mag theme <= 1.0.9 - Authenticated Arbitrary Plugin Activation Vulnerability4.3 Medium
- hashthemes totalWordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation4.3 Medium
- video gallery by total-soft gallery – youtube galleryWordPress Video Gallery – YouTube Gallery plugin <= 1.7.6 - Broken Access Control vulnerability7.5 High
- 8degree themes coming soon landing page and maintenance mode wordpress pluginWordPress Coming Soon Landing Page and Maintenance Mode WordPress Plugin plugin <= 2.2.0 - Broken Access Control5.3 Medium
- pierre jehan owl carouselWordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability5.3 Medium
- ays pro survey maker, survey maker team maker +1 moreWordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability5.3 Medium
- wpdeveloper essential blocks for gutenberg, essential blocks +1 moreWordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control6.5 Medium
- saad iqbal apiexperts square for woocommerceWordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control5.3 Medium
- averta depicter slider, depicter slider and popup by averta slider +1 moreWordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerability4.3 Medium
- printful integration for woocommerceWordPress Printful Integration for WooCommerce plugin <= 2.2.3 - Cross Site Request Forgery (CSRF)4.3 Medium
- wp onlinesupport, essential plugin trending/popular post slider and widgetWordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerability5.3 Medium
- joomsky js help desk, js help desk – best help desk & support plugin +1 moreWordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control5.4 Medium
- joomsky js help desk, js help desk – best help desk & support plugin +1 moreWordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability9.1 Critical
- villatheme(villatheme.com) ald – dropshipping and fulfillment for aliexpress and woocommerceWordPress ALD Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 1.0.21 - Broken Access Control + CSRF4.3 Medium
- lauri karisola / wp trio stock sync for woocommerceWordPress Stock Sync for WooCommerce plugin <= 2.3.2 - Broken Access Control4.3 Medium
- villatheme curcyWordPress CURCY plugin <= 2.1.25 - Unauthenticated plugin settings change vulnerability6.5 Medium
- tyche softwares print invoice & delivery notes for woocommerce, tychesoftwares print invoice \& delivery notes for woocommerce +1 moreWordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability6.5 Medium
- robosoft robo galleryWordPress Robo Gallery plugin <= 3.2.9 - Auth. Broken Access Control vulnerability5.4 Medium
- lucian apostol auto affiliate linksWordPress Auto Affiliate Links plugin <= 6.2.1.5 - Unauth. Broken Access Control vulnerability6.5 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability5.4 Medium
- code-atlantic popup maker, popup maker maker +1 moreWordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerability3.5 Low
- strategy11 formidable formsWordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability4.3 Medium
- stylemixthemes eroom – zoom meetings & webinarWordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerability4.3 Medium
- dell recoverpoint for virtual machinesDell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic...6.5 Medium
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User...4.4 Medium
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability. A...6.6 Medium
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of...6.5 Medium
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability...5.3 Medium
- crushftpStored XSS in CrushFTP9.6 Critical
- phpmyfaqphpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames4.9 Medium
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An...5.3 Medium
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A...8.8 High
- richardperdaan myparcelMyParcel <= 4.24.1 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…