CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability5.4 Medium
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control5.3 Medium
- wedevs wp project managerWordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability6.5 Medium
- solidwp ithemes syncWordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerability4.3 Medium
- supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability5.3 Medium
- essentialplugin accordion and accordion sliderWordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control5.3 Medium
- essential plugin portfolio and projectsWordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerability4.3 Medium
- themeisle redirection for contact form 7WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerability7.5 High
- dash labs yet another stars ratingWordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability5.3 Medium
- social share pro share icons & social share buttonsWordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerability4.3 Medium
- dylan blokhuis instant cssWordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability5.4 Medium
- certain dev booster elementor addonsWordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability5.3 Medium
- codents simple googlebot visitWordPress Simple Googlebot Visit plugin <= 1.2.4 - Broken Access Control vulnerability5.3 Medium
- stanislav kuznetsov qr code mecard/vcard generatorWordPress QR code MeCard/vCard generator plugin <= 1.6.0 - Broken Access Control vulnerability4.3 Medium
- rednao donations made easy – smart donations, donations made easy - smart donations +1 moreWordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability4.3 Medium
- artbees jupiter x core, jupiterx core +1 moreWordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability8.3 High
- onthegosystems languageWordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability5.4 Medium
- easyship woocommerce shipping ratesWordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerability5.4 Medium
- miniorange yourmembership single sign onWordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerability6.5 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability4.3 Medium
- multivendorx woocommerce product stock alertWordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability6.5 Medium
- the african boss checkout with zelle on woocommerceWordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability5.3 Medium
- designinvento directorypressWordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability6.5 Medium
- ronik@unlimitedwp wpschoolpressWordPress WPSchoolPress plugin <= 2.2.7 - Broken Access Control vulnerability6.5 Medium
- cool plugins cryptocurrency widgets – price ticker & coins list, coolplugins cryptocurrency widgets +1 moreWordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability5.3 Medium
- iulia cazan image regenerate & select cropWordPress Image Regenerate & Select Crop plugin <= 7.1.0 - Broken Access Control vulnerability5.4 Medium
- liquidpoll – advanced polls for creators and brandsWordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability4.3 Medium
- feedbackwp kk star ratingsWordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability5.3 Medium
- inqsys duplicate post page menu & custom post typeWordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability5.4 Medium
- wpthemego sw product bundlesWordPress SW Product Bundles plugin <= 2.0.15 - Broken Access Control vulnerability5.4 Medium
- hugh lashbrooke post hit counterWordPress Post Hit Counter plugin <= 1.3.2 - Broken Access Control4.3 Medium
- catkin redi restaurant reservationWordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability7.3 High
- suresh chand chp ads block detectorWordPress CHP Ads Block Detector plugin <= 3.9.5 - Broken Access Control vulnerability5.4 Medium
- yith woocommerce waiting listWordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability5.3 Medium
- jegstudio gutenverseWordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability5.3 Medium
- stellarwp the events calendar, the events calendar events calendar +1 moreWordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability5.3 Medium
- wpwax directoristWordPress Directorist plugin <= 7.5.4 - Arbitrary Content Deletion vulnerability4.3 Medium
- cimatti wordpress contact forms, cimatti consulting contact forms by cimatti +1 moreWordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability5.4 Medium
- dynamic.ooo dynamic visibility for elementorWordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerability5.4 Medium
- surferWordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability7.6 High
- constant contact formsWordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability4.3 Medium
- gesundheit bewegt gmbh zippyWordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerability5.3 Medium
- rextheme change woocommerce add to cart button textWordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerability5.4 Medium
- uncanny owl toolkit for learndashWordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability6.5 Medium
- g5theme grid plusWordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability5.4 Medium
- inisev social media & share iconsWordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRF4.3 Medium
- cybernetikz easy social iconsWordPress Easy Social Icons plugin <= 3.2.5 - Broken Access Control vulnerability4.3 Medium
- unknown spam protection, antispam, firewall by cleantalkWordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerability8.8 High
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerability4.3 Medium
- veronalabs slimstat analyticsWordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability6.5 Medium
- Show moreLoading…