The archive.

stellarwp1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-9634 · stellarwp GiveWP – Donation Plugin and Fundraising Platform

GiveWP – Donation Plugin and Fundraising Platform <= 3.16.3 - Unauthenticated PHP Object Injection to Remote Code Execution

arraytics1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2024-9263 · arraytics Timetics – Appointment Booking & Scheduling

WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-43566 · Microsoft Microsoft Edge (Chromium-based)

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

supsystic1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-48042 · supsystic Contact Form by Supsystic

WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability

EPSS 1%CVSS 9.1

Unlimited Elements1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-49271 · Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability

EPSS 1%CVSS 9.1

nextendweb1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9893 · nextendweb Nextend Social Login Pro

Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider

quadlayers1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2021-4443 · quadlayers QuadMenu – Mega Menu

WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation

scottopolis1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-9305 · scottopolis AppPresser – Mobile App Framework

AppPresser – Mobile App Framework <= 4.4.4 - Privilege Escalation and Account Takeover via Weak OTP

SUSE2 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2023-32191 · SUSE rke

rke's credentials are stored in the RKE1 Cluster state ConfigMap

EPSS 0.7%CVSS 9.9

CVE-2023-32188 · SUSE neuvector

JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

EPSS 0.6%CVSS 9.4

wpindeed1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2020-36832 · wpindeed Indeed Membership Pro

Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass

cyberlord922 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-9862 · cyberlord92 Miniorange OTP Verification with Firebase

Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change

EPSS 0.6%CVSS 9.8

CVE-2024-9863 · cyberlord92 Miniorange OTP Verification with Firebase

Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value

EPSS 0.6%CVSS 9.8

Denis1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49257 · Denis Azz Anonim Posting

WordPress Azz Anonim Posting plugin <= 0.9 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

Gora Tech LLC1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49291 · Gora Tech LLC Cooked Pro

WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

jiangqie1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-49314 · jiangqie JiangQie Free Mini Program

WordPress JiangQie Free Mini Program plugin <= 2.5.2 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

SK1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-49247 · SK BuddyPress Better Registration

WordPress BuddyPress Better Registration plugin <= 1.6 - Broken Authentication vulnerability

themegrill1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2020-36837 · themegrill ThemeGrill Demo Importer

ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset

EPSS 0.6%CVSS 9.9

Tophive1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-9105 · Tophive Ultimate AI

UltimateAI <= 2.8.3 - Authentication Bypass

EPSS 0.6%CVSS 9.8

Al Imran Akash1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-49218 · Al Imran Akash Recently

WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability

CodePassenger1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-49322 · CodePassenger Job Board Manager for WordPress

WordPress Job Board Manager for WordPress plugin <= 1.0 - Privilege Escalation vulnerability

GMRobbins1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-48026 · GMRobbins Disc Golf Manager

WordPress Disc Golf Manager plugin <= 1.0.0 - PHP Object Injection vulnerability

Limbcode1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2024-49260 · Limbcode WordPress Gallery Plugin – Limb Image Gallery

WordPress Limb Gallery plugin <= 1.5.7 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

madiriaashish1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-49217 · madiriaashish Adding drop down roles in registration

WordPress Adding drop down roles in registration plugin <= 1.1 - Privilege Escalation vulnerability

Scott1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-49318 · Scott My Reading Library

WordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability

SICK AG1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2024-10025 · SICK AG SICK CLV6xx

Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx

EPSS 0.8%CVSS 9.1

takayukii1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2024-48035 · takayukii ACF Images Search And Insert

WordPress ACF Images Search And Insert plugin <= 1.1.4 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

TECNO1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-10018 · TECNO com.transsion.aivoiceassistant

Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.

jetmonsters1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2020-36840 · jetmonsters Timetable and Event Schedule by MotoPress

Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization

EPSS 0.4%CVSS 9.8

Meta1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-49400 · Meta Tacquito

Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and ar…