CVE-2024-51464 (v3: 4.3) 21 Dec 2024

IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated a... Read more ➔

CVE-2024-51463 (v3: 5.4) 21 Dec 2024

IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests... Read more ➔

CVE-2024-12884 21 Dec 2024

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of t... Read more ➔

CVE-2024-12883 21 Dec 2024

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown func... Read more ➔

CVE-2024-12875 (v3: 4.9) 21 Dec 2024

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Directory Traversal in all versions... Read more ➔

CVE-2024-12591 (v3: 6.4) 21 Dec 2024

The MagicPost plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wb_share_social shortcode in all versions up to, and... Read more ➔

CVE-2024-12558 (v3: 6.5) 21 Dec 2024

The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability... Read more ➔

CVE-2024-12408 (v3: 6.1) 21 Dec 2024

The WP on AWS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST data in all versions up to, and including, 5.2.1 due to... Read more ➔

CVE-2024-11722 (v3: 5.9) 21 Dec 2024

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including,... Read more ➔

CVE-2024-11688 (v3: 6.1) 21 Dec 2024

The LaTeX2HTML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ver' or 'date' parameter in all versions up to, and inclu... Read more ➔

CVE-2024-10453 (v3: 6.4) 21 Dec 2024

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typog... Read more ➔

CVE-2024-9545 (v3: 6.4) 21 Dec 2024

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_contact_box a... Read more ➔

CVE-2024-12588 (v3: 6.4) 21 Dec 2024

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in a... Read more ➔

CVE-2024-11808 (v3: 6.1) 21 Dec 2024

The Pingmeter Uptime Monitoring plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '_wpnonce' parameter in all versions up t... Read more ➔

CVE-2024-10797 (v3: 4.3) 21 Dec 2024

The Full Screen Menu for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.7 via the Ful... Read more ➔

CVE-2024-12771 (v3: 8.8) 21 Dec 2024

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi... Read more ➔

CVE-2024-12721 (v3: 7.2) 21 Dec 2024

The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via des... Read more ➔

CVE-2024-12697 (v3: 6.4) 21 Dec 2024

The real.Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.1.1 due to insufficient input s... Read more ➔

CVE-2024-12635 (v3: 6.5) 21 Dec 2024

The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dir_id' parameter in all versions up to, and including, 2.2.0 due... Read more ➔

CVE-2024-12262 (v3: 6.1) 21 Dec 2024

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.... Read more ➔

CVE-2024-12066 (v3: 8.8) 21 Dec 2024

The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_... Read more ➔

CVE-2024-11975 (v3: 6.1) 21 Dec 2024

The Reactflow Visitor Recording and Heatmaps plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.... Read more ➔

CVE-2024-11938 (v3: 6.4) 21 Dec 2024

The One Click Upsell Funnel for WooCommerce – Funnel Builder for WordPress, Create WooCommerce Upsell, Post-Purchase Upsell & Cross Sell Offers t... Read more ➔

CVE-2024-11682 (v3: 6.1) 21 Dec 2024

The G Web Pro Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in all versions up to, and incl... Read more ➔

CVE-2024-11287 (v3: 6.1) 21 Dec 2024

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on t... Read more ➔