CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- html5maps tabs makerTabs Maker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- homeasap my idx home searchMy IDX Home Search <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- glomex oembedglomex oEmbed <= 0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- mgplugin sip calculatorSIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
assimpOSS-FuzzBad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcessNo score- No product listedIn Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to...9.1 Critical
- geovision gv-asmanagerGeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability6.5 Medium
- msi centerWacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability7.0 High
goyave.dev/goyave/v5GoFull access to the host's OS file system using osfs.FS with Router.Static in goyave.dev/goyave/v5No score- quetrobits playloom-enginePlayloom Engine Data Storage Vulnerability8.7 High
- man-group dtaleD-Tale allows Remote Code Execution through the Custom Filter Input6.9 Medium
- imagination technologies graphics ddkGPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)7.8 High
- imagination technologies graphics ddkGPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems7.8 High
- fhir ucum-javaUcum-java has an XXE vulnerability in XML parsing8.6 High
- laravel pulseLaravel Pulse Allows Remote Code Execution via Unprotected Query Method8.7 High
- combodo itopCombodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter7.9 High
- fortra goanywhere mftLimited Information Disclosure in GoAnywhere MFT Prior to 7.7.05.3 Medium
- thomas k landis fancy roller scrollerWordPress Fancy Roller Scroller plugin <= 1.4.0 - CSRF to Stored XSS vulnerability7.1 High
- mashiurz plain postWordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bakkbone australia floristpressWordPress FloristPress plugin <= 7.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- skt themes barterWordPress Barter theme <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- skt themes bicycleshopWordPress Bicycleshop theme <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fahad mahmood wp quick shopWordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- howard ehrenberg connect contact form 7 to constant contactWordPress Connect Contact Form 7 to Constant Contact plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- staggsWordPress Staggs plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- labelgrid toolsWordPress LabelGrid Tools plugin <= 1.3.58 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- sylvia van os simple presenterWordPress Simple Presenter plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jbd7 geoflickrWordPress geoFlickr plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- christer fernstrom hello event widgets for elementorWordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- devrix dx dark siteWordPress DX Dark Site plugin <= 1.0.1 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- projectopiaWordPress Projectopia plugin <= 5.1.7 - Account Takeover vulnerability8.8 High
- immosoft immotoolbox connectWordPress ImmoToolBox Connect plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- zeshan b quran phrases about most people shortcodesWordPress Quran Phrases About Most People Shortcodes plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- silverplugins217 check pincode for woocommerceWordPress Check Pincode For Woocommerce plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hep hep hurra (hhh) hurrakifyWordPress Hurrakify plugin <= 2.4 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- metup clevernode related contentWordPress CleverNode Related Content plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- link nacional invoice payment for woocommerceWordPress Invoice Payment for WooCommerce plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- universamWordPress UNIVERSAM plugin < 8.59 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- eyal fitoussi geo my wordpressWordPress GEO my WP plugin <= 4.5.0.4 - Broken Access Control vulnerability6.5 Medium
- dealertrend cardealerpressWordPress CarDealerPress plugin <= 6.6.2410.02 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cloud inn smsifyWordPress SMSify plugin <= 6.0.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- saad iqbal new user approveWordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability5.4 Medium
- ederson peka media downloaderWordPress Media Downloader plugin <= 0.4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hive support supportWordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- icdsoft reseller storeWordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kundgeneratorWordPress Kundgenerator plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- nicejobWordPress NiceJob plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- google web storiesWordPress Web Stories plugin <= 1.37.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicheaddons restaurant & cafe addon for elementor, restaurant \& cafe addon for elementor +1 moreWordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicheaddons events addon for elementorWordPress Events Addon for Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…