CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- chenyenming ui slider filter by priceWordPress Ui Slider Filter By Price plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- diversified technology corp. dtc documentsWordPress DTC Documents plugin <= 1.1.05 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- posti shippingWordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability6.5 Medium
- wpgear hack-infoWordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- wpfactory wp currency exchange ratesWordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability7.1 High
- phuc pham multiple admin emailsWordPress Multiple Admin Emails plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- get push monkey llc push monkey pro – web push notifications and woocommerce abandoned cartWordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability7.1 High
- eduardo addweatherWordPress addWeather plugin <= 2.5.1 - CSRF to Stored XSS vulnerability7.1 High
- midoks wp微信机器人WordPress WP微信机器人 plugin <= 5.3.5 - CSRF to Stored XSS vulnerability7.1 High
- matt walters wordpress filterWordPress WordPress Filter plugin <= 1.4.1 - CSRF to Stored XSS vulnerability7.1 High
- khubbaib mandrill wpWordPress Mandrill WP plugin <= 1.0.5 - CSRF to Stored XSS vulnerability7.1 High
- sheikh heera wp fiddleWordPress WP Fiddle plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- antonio gocaj go animateWordPress Go Animate plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- crudlab google plus buttonWordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerability7.1 High
- jcaruso001 flaming formsWordPress Flaming Forms plugin <= 1.0.1 - CSRF to Stored XSS vulnerability7.1 High
- meloniq appmapsWordPress AppMaps plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- jozoor arabic webfontsWordPress Arabic Webfonts plugin <= 1.4.6 - Broken Access Control vulnerability4.3 Medium
- ciprian turcu advanced fancyboxWordPress Advanced Fancybox plugin <= 1.1.1 - CSRF to Stored XSS vulnerability7.1 High
- nazmul ahsan mdc comment toolbarWordPress MDC Comment Toolbar plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- a328496647 ck and syntaxhighlighterWordPress CK and SyntaxHighlighter plugin <= 3.4.2 - CSRF to Stored XSS vulnerability7.1 High
- andy chapman ect social shareWordPress ECT Social Share plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- codehandling youtube video gridWordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability6.5 Medium
- eagerterrier sopa blackoutWordPress SOPA Blackout plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- fzmaster xpd reduce image filesizeWordPress XPD Reduce Image Filesize plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- hosting.io wp controllerWordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- brandt-net display future postsWordPress Display Future Posts plugin <= 0.2.3 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- ecommerce templates ect product carouselWordPress ECT Product Carousel plugin <= 1.9 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- cconoly wp-hidethatWordPress WP-HideThat plugin <= 1.2 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- geowp geoportail shortcodeWordPress Geoportail Shortcode plugin <= 2.4.4 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- navdeep wp login with ajaxWordPress Wp Login with Ajax plugin <= 0.6 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- sanjay singh negi floating video playerWordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- aleksander novikov metrikaWordPress Metrika plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- ilya chekalskiy like in vk.comWordPress Like in Vk.com plugin <= 0.5.2 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- jesse overright social media sharingWordPress Social Media Sharing plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- lionscripts.com lionscripts: site maintenance & noindex nofollow pluginWordPress LionScripts: Site Maintenance plugin <= 2.1 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- linda macphee-cobb category of postsWordPress Category of Posts plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- andy fradelakis leaderboard pluginWordPress LeaderBoard Plugin plugin <= 1.2.4 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- ivan ovsyannikov aphorismusWordPress Aphorismus plugin <= 1.2.0 - CSRF to Stored XSS vulnerability7.1 High
- onigetoc add image to postWordPress Add image to Post plugin <= 0.6 - CSRF to Stored XSS vulnerability7.1 High
- bastien ho eelv newsletterWordPress EELV Newsletter plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- shambhu patnaik wp flipkart importerWordPress WP Flipkart Importer plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- mohamed riyaz admin customizationWordPress Admin Customization plugin <= 2.2 - CSRF to Stored XSS vulnerability7.1 High
- benjemin phzoomWordPress phZoom plugin <= 1.2.92 - CSRF to Stored XSS vulnerability7.1 High
- marcel cl simple booking widget, simple booking widget +1 moreWordPress Simple Booking – Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- thomas hoefter onlywire multi autosubmitterWordPress Onlywire Multi Autosubmitter plugin <= 1.2.4 - CSRF to Stored XSS vulnerability7.1 High
- koolkatwebdesigns jcarouselWordPress jCarousel for WordPress plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- jettochkin jet footer codeWordPress Jet Footer Code plugin <= 1.4 - CSRF to Stored XSS vulnerability7.1 High
- alok tiwari amazon product priceWordPress Amazon Product Price plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- gaxx keywordsWordPress Gaxx Keywords plugin <= 0.2 - CSRF to Stored XSS vulnerability7.1 High
- blueskyy wp-ban-userWordPress WP-Ban-User plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- Show moreLoading…