CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- think201 faqsWordPress FAQs plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- think201 clientsWordPress Clients plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- think201 easy replaceWordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- think201 echozaWordPress Echoza plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- appsbd simple notificationWordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability6.5 Medium
- appsbd elite notification – sales popup, social proof, fomo & woocommerce notificationWordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- blaze online eparcel for woocommerce, blazeonline blaze online eparcel for woocommerce +1 moreWordPress Blaze Online eParcel for WooCommerce plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- dugudlabs eyewear prescription formWordPress Eyewear prescription form plugin <= 4.0.18 - Arbitrary Option Update to Privilege Escalation vulnerability9.8 Critical
- cleveland heights-university heights public library webdeveloper board document manager from chuhplWordPress Board Document Manager from CHUHPL plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anzar ahmed ni crm leadWordPress Ni CRM Lead plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anzar ahmed ni woocommerce bulk product editorWordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- shiptimize for woocommerceWordPress Shiptimize for WooCommerce plugin <= 3.1.86 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- automattic limit login attemptsWordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability9.3 Critical
- enea overclokk advanced control manager for wordpress by italystrapWordPress Advanced Control Manager plugin <= 2.16.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anzar ahmed ni woocommerce order exportWordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- berocket brands for woocommerceWordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability5.3 Medium
- apasionados comment blacklist updaterWordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability5.3 Medium
- deepen bajracharya inactive logoutWordPress Inactive Logout plugin <= 3.2.2 - Broken Access Control vulnerability5.4 Medium
- contact form - wpmanageninja llc fluentformWordPress Fluent Forms plugin <= 5.0.8 - Broken Access Control vulnerability5.3 Medium
- rtcamp rtmedia for wordpress, buddypress and bbpressWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability4.3 Medium
- wpdirectorykit wp directory kitWordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability5.3 Medium
- miniorange saml sp single sign onWordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability4.3 Medium
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability4.3 Medium
- alex volkov wp accessibility helper (wah)WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability4.3 Medium
- plugins360 automatic youtube galleryWordPress Automatic YouTube Gallery plugin <= 2.3.3 - Broken Access Control vulnerability4.3 Medium
- bqworks slider proWordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerability4.3 Medium
- guido vs contact formWordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability5.3 Medium
- clicktotweet.com click to tweetWordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerability5.4 Medium
- wp happy coders posts like dislikeWordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability5.3 Medium
- majeed raza carousel sliderWordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability5.3 Medium
- bitpay checkout for woocommerceWordPress BitPay Checkout for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability5.3 Medium
- heateor super socializerWordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability4.3 Medium
- adnan analytify, analytify - google analytics dashboard +1 moreWordPress Analytify plugin <= 5.1.0 - Broken Access Control vulnerability3.5 Low
- wiser notify wisernotify social proofWordPress WiserNotify Social Proof plugin <= 2.5 - Broken Access Control vulnerability5.3 Medium
- koen reus post to google my business (google business profile)WordPress Post to Google My Business (Google Business Profile) plugin <= 3.1.14 - Broken Access Control vulnerability4.3 Medium
- mad fish digital bulk noindex & nofollow toolkitWordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerability5.4 Medium
- ilghera woocommerce support systemWordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- pechenki telsenderWordPress TelSender plugin <= 1.14.11 - Broken Access Control + CSRF vulnerability5.4 Medium
- tyche softwares abandoned cart lite for woocommerceWordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- alphabpo easy newsletter signupsWordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability6.5 Medium
- ovic team product bundleWordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability6.5 Medium
- michal novák secure admin ipWordPress Secure Admin IP plugin <= 2.0 - IP Spoofing vulnerability5.3 Medium
- shapedplugin llc category slider for woocommerceWordPress Category Slider for WooCommerce plugin <= 1.4.15 - Broken Access Control vulnerability4.3 Medium
- premmerce user rolesWordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerability8.1 High
- andrew fiebert simple urlsWordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability5.4 Medium
- reviewxWordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability4.3 Medium
- realmag777 husky, pluginus husky - products filter professional for woocommerce +1 moreWordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability4.3 Medium
- bqworks accordion sliderWordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerability4.3 Medium
- damian-gora justified galleryWordPress Justified Gallery plugin <= 1.7.3 - Broken Access Control vulnerability4.3 Medium
- mailmunch mailchimp forms by mailmunch, mailchimp forms +1 moreWordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control4.3 Medium
- Show moreLoading…