Wordfence Intelligence Weekly WordPress Vulnerability Report (October 28, 2024 to November 3, 2024)
🦸 👻 Calling all superheroes and haunters! Introducing the Cybersecurity Month Spooktacular Haunt and the WordPress Superhero Challenge for the Wordfence Bug Bounty Program! Through November 11th, 2024:
- All in-scope vulnerability types for WordPress plugins/themes with >= 1,000 active installations are in-scope for ALL researchers
- Top-tier researchers earn automatic bonuses of between 10% to 120% for valid submissions
- Pending report limits are increased for all
- It’s possible to earn up to $31,200 for high impact vulnerabilities!
Last week, there were 230 vulnerabilities disclosed in 221 WordPress Plugins and no WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 50 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 19,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-759 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 91 |
| Unpatched | 139 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 202 |
| High Severity | 17 |
| Critical Severity | 11 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 124 |
| Cross-Site Request Forgery (CSRF) | 43 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 21 |
| Unrestricted Upload of File with Dangerous Type | 12 |
| Missing Authorization | 7 |
| Exposure of Sensitive Information to an Unauthorized Actor | 4 |
| Authentication Bypass Using an Alternate Path or Channel | 2 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 2 |
| Improper Control of Generation of Code ('Code Injection') | 2 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2 |
| Incorrect Privilege Assignment | 2 |
| Authorization Bypass Through User-Controlled Key | 1 |
| Deserialization of Untrusted Data | 1 |
| External Control of File Name or Path | 1 |
| Improper Access Control | 1 |
| Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') | 1 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 1 |
| Insertion of Sensitive Information into Log File | 1 |
| Missing Authentication for Critical Function | 1 |
| Server-Side Request Forgery (SSRF) | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 74 | |
| 21 | |
| 14 | |
| 10 | |
| 8 | |
| 8 | |
| 8 | |
| 6 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| (dp) AddThis | dp-addthis |
| 3D Presentation | 3d-presentation |
| Aajoda Testimonials | aajoda-testimonials |
| Accordion title for Elementor | accordion-title-for-elementor |
| Addressbook | addressbook |
| Admin SMS Alert | admin-sms-alert |
| Administrator Z | administrator-z |
| Advanced Control Manager for WordPress by ItalyStrap | advanced-control-manager |
| Advanced PDF Generator | advanced-pdf-generator |
| affiliate-toolkit – WP Affiliate Plugin with Amazon | affiliate-toolkit-starter |
| AI Power: Complete AI Pack | gpt3-ai-content-generator |
| All Post Contact Form | allpost-contactform |
| Alley Elementor Widget | alley-elementor-widget |
| Alphabetical List | alphabetical-list |
| AmaDiscount Plugin | amadiscount |
| amazing neo icon font for elementor | amazing-neo-icon-font-for-elementor |
| Amazon Associate Filter | amazon-associate-filter |
| AMP Img Shortcode | amp-img-shortcode |
| Ancient World Linked Data for WordPress | ancient-world-linked-data-for-wordpress |
| APK Downloader | apk-downloader |
| Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress | bookingpress-appointment-booking |
| Appointmind | appointmind |
| AR for WooCommerce | ar-for-woocommerce |
| Arconix Shortcodes | arconix-shortcodes |
| aThemes Addons for Elementor | athemes-addons-for-elementor-lite |
| Audio Comparison Lite | audio-comparison-lite |
| Awesome Progress Bar | awesome-progess-bar |
| Awesome Shortcodes For Genesis | awesome-shortcodes-for-genesis |
| AwesomePress | awesomepress |
| BBP Core – Expand bbPress powered forums with useful features | bbp-core |
| Beaver Builder – WordPress Page Builder | beaver-builder-lite-version |
| Beds24 Online Booking | beds24-online-booking |
| BetterLinks – An Advanced Solution for Affiliate Link Management, Link Shortening, Link Tracking, Link Branding & Marketing | betterlinks |
| Bigmart Elements | bigmart-elements |
| Black Widgets For Elementor | black-widgets |
| Blrt WP Embed | blrt-wp-embed |
| Bonway Static Block Editor | bonway-static-block-editor |
| bpmn.io | bpmnio |
| Bricksable for Bricks Builder | bricksable |
| BTEV | bluetrait-event-viewer |
| Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg | 5-stars-rating-funnel |
| Bulk Change Role | bulk-role-change |
| Classy Addons for Elementor | classy-addons-for-elementor |
| Clever Addons for Elementor | cafe-lite |
| Clyp | clyp |
| CM Table Of Contents – WordPress TOC Plugin | cm-table-of-content |
| Code Explorer | code-explorer |
| Countdown, Coming Soon, Maintenance – Countdown & Clock | countdown-builder |
| Cresta Addons for Elementor | cresta-addons-for-elementor |
| Crypto Tool | crypto |
| Custom Admin Menu | custom-admin-menu |
| Custom Author URL | author-slug |
| Custom post type templates for Elementor | custom-post-type-templates-for-elementor |
| DataMentor – Best DataTables Plugin for Elementor | datamentor |
| Definitive Addons for Elementor | definitive-addons-for-elementor |
| Delisho – Recipe Widgets and Blocks | dr-widgets-blocks |
| Display Terms Shortcode | display-terms-shortcode |
| Ditty – Responsive News Tickers, Sliders, and Lists | ditty-news-ticker |
| Domain Sharding | domain-sharding |
| Download Monitor | download-monitor |
| Download-Mirror-Counter | wp-download-mirror-counter |
| DS.DownloadList | dsdownloadlist |
| Dynamic Widgets | dynamic-widgets |
| e-shopsカート2 | e-shops-cart2 |
| Easy Accordion Gutenberg Block | easy-accordion-block |
| Easy Gallery | simple-gallery-odihost |
| Easy SVG Upload | easy-svg-upload |
| Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) | bdthemes-element-pack-lite |
| Elementary Addons | elementary-addons |
| Elo Rating Shortcode | elo-rating-shortcode |
| Emoji Shortcode | emoji-shortcode |
| Enable Shortcodes inside Widgets,Comments and Experts | enable-shortcodes-inside-widgetscomments-and-experts |
| EndomondoWP | endomondowp |
| Events Manager Pro – extended | events-manager-pro-extended |
| Exclusive Addons for Elementor | exclusive-addons-for-elementor |
| Extender All In One For Elementor | extender-all-in-one-for-elementor |
| EzyOnlineBookings Online Booking System Widget | ezyonlinebookings-online-booking-system |
| Featured Posts Scroll | featured-posts-scroll |
| FileOrganizer – Manage WordPress and Website Files | fileorganizer |
| Flash Show And Hide Box | flash-show-and-hide-box |
| Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder | formidable |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| FraudLabs Pro SMS Verification | fraudlabs-pro-sms-verification |
| GDReseller | gdreseller |
| Genoo | genoo |
| GEO my WP | geo-my-wp |
| Get Quote For Woocommerce – Request A Quote For Woocommerce | get-a-quote-for-woocommerce |
| Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) | gift-voucher |
| Gmap Point List | gmap-point-list |
| Gmw Premium Settings | gmw-premium-settings |
| Golf Tracker | golf-tracker |
| Group Chat & Video Chat by AtomChat | atomchat |
| Gutenberg Blocks with AI by Kadence WP – Page Builder Features | kadence-blocks |
| Header Footer Composer for Elementor | header-footer-composer |
| Hoo Addons for Elementor | hoo-addons-for-elementor |
| Hover Video Preview | hover-video-preview |
| HT Builder – WordPress Theme Builder for Elementor | ht-builder |
| HT Politic – For Political WordPress Themes / Website | wp-politic |
| ID-SK Toolkit | idsk-toolkit |
| Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation | zero-bs-crm |
| Jetpackcrm Ext Woo Connect | jetpackcrm-ext-woo-connect |
| Jigoshop – Store Exporter | jigoshop-exporter |
| Jobs for WordPress | job-postings |
| JS Help Desk – The Ultimate Help Desk & Support Plugin | js-support-ticket |
| Kata Plus – Addons for Elementor – Widgets, Extensions and Templates | kata-plus |
| Kento Ads Rotator | kento-ads-rotator |
| Knowledge Base | knowledgebase |
| LH QR Codes | lh-qr-codes |
| LiteSpeed Cache | litespeed-cache |
| Lodgix.com Vacation Rental Website Builder | lodgixcom-vacation-rental-listing-management-booking-plugin |
| Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) | magical-addons-for-elementor |
| MailPoet – Newsletters, Email Marketing, and Automation | mailpoet |
| Manage User Columns | manage-user-columns |
| Market 360 Viewer | market-360-viewer |
| Marketing Automation by AZEXO | marketing-automation-by-azexo |
| Marquee Elementor with Posts | marquee-elementor |
| MasterBip para Elementor | masterbip-for-elementor |
| Masteriyo LMS – eLearning and Online Course Builder for WordPress | learning-management-system |
| MDR Webmaster Tools | mdr-webmaster-tools |
| Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO – Media Library Tools | media-library-tools |
| Media Library Assistant | media-library-assistant |
| Media Modal | media-modal |
| Meta Store Elements | meta-store-elements |
| ML Responsive Audio player with playlist Shortcode | mlr-audio |
| Mobilize | mobilize |
| Move Addons for Elementor | move-addons |
| Multi Purpose Mail Form | multi-purpose-mail-form |
| Multiple Page Generator Plugin – MPG | multiple-pages-generator-by-porthas |
| MyCurator Content Curation | mycurator |
| MyOrderDesk | myorderdesk |
| Naver Blog | naver-blog-api |
| Newsletters | newsletters-lite |
| Ninja Forms – The Contact Form Builder That Grows With You | ninja-forms |
| NMR Strava activities | nmr-strava-activities |
| Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | otter-blocks |
| Paytium: Mollie payment forms & donations | paytium |
| Planning Center Online Giving | planning-center-online-giving |
| Platform.ly Official | platformly |
| Plug your WooCommerce into the largest catalog of customized print products from Helloprint | helloprint |
| Plugin Name: GMO Social Connection | gmo-social-connection |
| Porsline | porsline |
| Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX | ultimate-post |
| Post Status Notifier | post-status-notifier |
| Post Status Notifier Lite | post-status-notifier-lite |
| Premium Addons for Elementor | premium-addons-for-elementor |
| Pricer Ninja: Create and add responsive Pricing Tables to your website on-the-fly | pricer-ninja-pricing-tables |
| Pricing Tables WordPress Plugin – Easy Pricing Tables | easy-pricing-tables |
| Quran Shortcode | quran-shortcode |
| Random Featured Post | random-featured-post-plugin |
| ReCaptcha Integration for WordPress | wp-recaptcha-integration |
| Reftagger Shortcode | reftagger-shortcode |
| Responsive Flickr Gallery | responsive-flickr-gallery |
| Restaurant & Cafe Addon for Elementor | restaurant-cafe-addon-for-elementor |
| RLM Elementor Widgets Pack | rlm-elementor-widgets-pack |
| RSVP ME | rsvp-me |
| RSVPMaker for Toastmasters | rsvpmaker-for-toastmasters |
| Sales Page Addon – Elementor & Beaver Builder | sales-page-addon |
| Selar.co Widget | selar-co-widget |
| Seo Free | seo-free |
| SEO Plugin by Squirrly SEO | squirrly-seo |
| SEUR Oficial | seur |
| SH Slideshow | sh-slideshow |
| Show Visitor IP Address | show-visitor-ip-address |
| Sided | sided |
| Simple Business Manager | simple-business-manager |
| Simple Goods | simple-goods |
| Simple Job Manager | simple-job-manager |
| Simple Page Specific Sidebars | page-specific-sidebars |
| SIP Reviews Shortcode for WooCommerce | sip-reviews-shortcode-woocommerce |
| Skip To | skip-to |
| SKSDEV Toolkit | sksdev-toolkit |
| Slicko | slicko-for-elementor |
| Smart Mockups | smart-mockups |
| SmartLink Dynamic URLs | smartlink-dinamic-urls |
| SMS Alert Order Notifications – WooCommerce | sms-alert |
| Spexo Addons for Elementor – Free Elementor Addons, Widgets and Templates | sastra-essential-addons-for-elementor |
| Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder | stacks-mobile-app-builder |
| Stars SMTP Mailer | stars-smtp-mailer |
| Step by Step | step-by-step |
| Sticky Social Bar | sticky-social-bar |
| StreamWeasels Kick Integration | streamweasels-kick-integration |
| StreamWeasels YouTube Integration | streamweasels-youtube-integration |
| Subscribe to Comments | subscribe-to-comments |
| Super Addons for Elementor | super-addons-for-elementor |
| T(-) Countdown | t-countdown |
| Taskbuilder – WordPress Project & Task Management plugin | taskbuilder |
| Themedy Toolbox | themedy-toolbox |
| ThemeFuse Maintenance Mode | themefuse-maintenance-mode |
| ThemeShark Templates & Widgets for Elementor | themeshark-elementor |
| TradeMe widgets | trademe-widget |
| Training – Courses | training |
| Twitter @Anywhere Plus | twitter-anywhere-plus |
| Ultimate TinyMCE | ultimate-tinymce |
| UPDATE NOTIFICATIONS | update-notifications |
| W3P SEO | wp-perfect-plugin |
| W3SPEEDSTER | w3speedster-wp |
| Webriti Custom Login | webriti-custom-login-page |
| Website price calculator | price-calculator-to-your-website |
| WeChat Subscribers Lite 微信公众订阅号插件 | wechat-subscribers-lite |
| While Loading | while-it-is-loading |
| Widget or Sidebar Shortcode | widget-or-sidebar-per-shortcode |
| WM Zoom | wm-zoom |
| Woo Manage Fraud Orders | woo-manage-fraud-orders |
| Woocommerce Product Design | woo-product-design |
| Woocommerce Quote Calculator | woo-quote-calculator-order |
| WordPress Business Plugin | business |
| World Prayer Time | world-prayer-time |
| WP Baidu Map | wp-baidu-map |
| WP Course Manager | wp-course-manager |
| WP donimedia carousel | wp-donimedia-carousel |
| WP EASY RECIPE | wp-easy-recipe |
| WP EIS | wp-eis |
| WP Feature Box | wp-feature-box |
| WP Hotel Booking | wp-hotel-booking |
| WP Pocket URLs | wp-pocket-urls |
| WP Simple Anchors Links | wp-simple-anchors-links |
| WP Team – WordPress Team Member Plugin | ht-team-member |
| WPAdverts – Classifieds Plugin | wpadverts |
| WPC Smart Messages for WooCommerce | wpc-smart-messages |
| WPGlobus Translate Options | wpglobus-translate-options |
| Курс валют UAH | ukrainian-currency |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
CVE-ID
CVE-2024-10392
CVE-2024-10392
Patch Status
Patched
Patched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
AI Power: Complete AI Pack
AI Power: Complete AI Pack
Researcher
CVE-ID
CVE-2024-50523
CVE-2024-50523
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
All Post Contact Form
All Post Contact Form
Researcher
CVE-ID
CVE-2024-50510
CVE-2024-50510
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
AR for WooCommerce
AR for WooCommerce
Researcher
CVE-ID
CVE-2024-9989
CVE-2024-9989
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Crypto Tool
Crypto Tool
Researcher
CVE-ID
CVE-2024-9988
CVE-2024-9988
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Crypto Tool
Crypto Tool
Researcher
CVE-ID
CVE-2024-50526
CVE-2024-50526
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Multi Purpose Mail Form
Multi Purpose Mail Form
Researcher
CVE-ID
CVE-2024-50525
CVE-2024-50525
Patch Status
Patched
Patched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Plug your WooCommerce into the largest catalog of customized print products from Helloprint
Plug your WooCommerce into the largest catalog of customized print products from Helloprint
Researcher
CVE-ID
CVE-2024-50531
CVE-2024-50531
Patch Status
Patched
Patched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
RSVPMaker for Toastmasters
RSVPMaker for Toastmasters
Researcher
CVE-ID
CVE-2024-50527
CVE-2024-50527
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder
Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder
Researcher
CVE-ID
CVE-2024-50509
CVE-2024-50509
Patch Status
Unpatched
Unpatched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Woocommerce Product Design
Woocommerce Product Design
Researcher
CVE-ID
CVE-2024-8512
CVE-2024-8512
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
W3SPEEDSTER
W3SPEEDSTER
Researcher
Bulk Change Role <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-ID
CVE-2024-50504
CVE-2024-50504
Patch Status
Unpatched
Unpatched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Bulk Change Role
Bulk Change Role
Researcher
CVE-ID
CVE-2024-9990
CVE-2024-9990
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Crypto Tool
Crypto Tool
Researcher
CVE-ID
CVE-2024-50506
CVE-2024-50506
Patch Status
Unpatched
Unpatched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Marketing Automation by AZEXO
Marketing Automation by AZEXO
Researcher
CVE-ID
CVE-2024-10008
CVE-2024-10008
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Masteriyo LMS – eLearning and Online Course Builder for WordPress
Masteriyo LMS – eLearning and Online Course Builder for WordPress
Researcher
CVE-ID
CVE-2024-50530
CVE-2024-50530
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Stars SMTP Mailer
Stars SMTP Mailer
Researcher
CVE-ID
CVE-2024-50529
CVE-2024-50529
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Training – Courses
Training – Courses
Researcher
CVE-ID
CVE-2024-50511
CVE-2024-50511
Patch Status
Unpatched
Unpatched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
WP donimedia carousel
WP donimedia carousel
Researcher
CVE-ID
CVE-2024-51582
CVE-2024-51582
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
WP Hotel Booking
WP Hotel Booking
Researcher
CVE-ID
CVE-2024-10436
CVE-2024-10436
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
WPC Smart Messages for WooCommerce
WPC Smart Messages for WooCommerce
Researcher
CVE-ID
CVE-2024-50507
CVE-2024-50507
Patch Status
Unpatched
Unpatched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
DS.DownloadList
DS.DownloadList
Researcher
CVE-ID
CVE-2024-50550
CVE-2024-50550
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
LiteSpeed Cache
LiteSpeed Cache
Researcher
CVE-ID
CVE-2024-7985
CVE-2024-7985
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
FileOrganizer – Manage WordPress and Website Files
FileOrganizer – Manage WordPress and Website Files
Researcher
CVE-ID
CVE-2024-50508
CVE-2024-50508
Patch Status
Unpatched
Unpatched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Woocommerce Product Design
Woocommerce Product Design
Researcher
CVE-ID
CVE-2024-9846
CVE-2024-9846
Patch Status
Unpatched
Unpatched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Enable Shortcodes inside Widgets,Comments and Experts
Enable Shortcodes inside Widgets,Comments and Experts
Researcher
CVE-ID
CVE-2024-9422
CVE-2024-9422
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Researcher
CVE-ID
CVE-2024-51661
CVE-2024-51661
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Media Library Assistant
Media Library Assistant
Researcher
CVE-ID
CVE-2024-10108
CVE-2024-10108
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
WPAdverts – Classifieds Plugin
WPAdverts – Classifieds Plugin
Researcher
CVE-ID
CVE-2024-51579
CVE-2024-51579
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg
Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg
Researcher
CVE-ID
CVE-2024-50524
CVE-2024-50524
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Administrator Z
Administrator Z
Researcher
CVE-ID
CVE-2024-51608
CVE-2024-51608
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
AmaDiscount Plugin
AmaDiscount Plugin
Researcher
CVE-ID
CVE-2024-51606
CVE-2024-51606
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Blrt WP Embed
Blrt WP Embed
Researcher
CVE-ID
CVE-2024-51621
CVE-2024-51621
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Download-Mirror-Counter
Download-Mirror-Counter
Researcher
CVE-ID
CVE-2024-51570
CVE-2024-51570
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Easy Gallery
Easy Gallery
Researcher
CVE-ID
CVE-2024-51607
CVE-2024-51607
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Golf Tracker
Golf Tracker
Researcher
Lodgix.com Vacation Rental Website Builder <= 3.9.73 - Authenticated (Contributor+) SQL Injection
6.5
CVE-ID
CVE-2024-50539
CVE-2024-50539
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Lodgix.com Vacation Rental Website Builder
Lodgix.com Vacation Rental Website Builder
Researcher
CVE-ID
CVE-2024-51619
CVE-2024-51619
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Market 360 Viewer
Market 360 Viewer
Researcher
CVE-ID
CVE-2024-51620
CVE-2024-51620
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Porsline
Porsline
Researcher
CVE-ID
CVE-2024-51625
CVE-2024-51625
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Quran Shortcode
Quran Shortcode
Researcher
CVE-ID
CVE-2024-50544
CVE-2024-50544
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
RSVP ME
RSVP ME
Researcher
CVE-ID
CVE-2024-51602
CVE-2024-51602
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Simple Job Manager
Simple Job Manager
Researcher
CVE-ID
CVE-2024-6479
CVE-2024-6479
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
SIP Reviews Shortcode for WooCommerce
SIP Reviews Shortcode for WooCommerce
Researchers
CVE-ID
CVE-2024-51601
CVE-2024-51601
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Website price calculator
Website price calculator
Researcher
CVE-ID
CVE-2024-51626
CVE-2024-51626
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Woocommerce Quote Calculator
Woocommerce Quote Calculator
Researcher
CVE-ID
CVE-2024-51623
CVE-2024-51623
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
WP EIS
WP EIS
Researcher
CVE-ID
CVE-2024-50540
CVE-2024-50540
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
(dp) AddThis
(dp) AddThis
Researcher
CVE-ID
CVE-2024-51578
CVE-2024-51578
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
3D Presentation
3D Presentation
Researcher
CVE-ID
CVE-2024-51614
CVE-2024-51614
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Aajoda Testimonials
Aajoda Testimonials
Researcher
CVE-ID
CVE-2024-51685
CVE-2024-51685
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Accordion title for Elementor
Accordion title for Elementor
Researcher
CVE-ID
CVE-2024-50541
CVE-2024-50541
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Advanced Control Manager for WordPress by ItalyStrap
Advanced Control Manager for WordPress by ItalyStrap
Researcher
CVE-ID
CVE-2024-10227
CVE-2024-10227
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
affiliate-toolkit – WP Affiliate Plugin with Amazon
affiliate-toolkit – WP Affiliate Plugin with Amazon
Researcher
CVE-ID
CVE-2024-50521
CVE-2024-50521
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Alley Elementor Widget
Alley Elementor Widget
Researcher
CVE-ID
CVE-2024-50543
CVE-2024-50543
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
amazing neo icon font for elementor
amazing neo icon font for elementor
Researcher
CVE-ID
CVE-2024-51576
CVE-2024-51576
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
AMP Img Shortcode
AMP Img Shortcode
Researcher
CVE-ID
CVE-2024-50520
CVE-2024-50520
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Ancient World Linked Data for WordPress
Ancient World Linked Data for WordPress
Researcher
CVE-ID
CVE-2024-10226
CVE-2024-10226
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Arconix Shortcodes
Arconix Shortcodes
Researcher
aThemes Addons for Elementor <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2024-51675
CVE-2024-51675
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
aThemes Addons for Elementor
aThemes Addons for Elementor
Researcher
AtomChat <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atomchat Shortcode
6.4
CVE-ID
CVE-2024-10232
CVE-2024-10232
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Group Chat & Video Chat by AtomChat
Group Chat & Video Chat by AtomChat
Researcher
CVE-ID
CVE-2024-51627
CVE-2024-51627
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Audio Comparison Lite
Audio Comparison Lite
Researcher
CVE-ID
CVE-2024-50548
CVE-2024-50548
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Awesome Progress Bar
Awesome Progress Bar
Researcher
CVE-ID
CVE-2024-51616
CVE-2024-51616
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
AwesomePress
AwesomePress
Researcher
CVE-ID
CVE-2024-9505
CVE-2024-9505
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Beaver Builder – WordPress Page Builder
Beaver Builder – WordPress Page Builder
Researcher
CVE-ID
CVE-2024-51589
CVE-2024-51589
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Bigmart Elements
Bigmart Elements
Researcher
CVE-ID
CVE-2024-51662
CVE-2024-51662
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Black Widgets For Elementor
Black Widgets For Elementor
Researcher
CVE-ID
CVE-2024-9388
CVE-2024-9388
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Black Widgets For Elementor
Black Widgets For Elementor
Researcher
CVE-ID
CVE-2024-50549
CVE-2024-50549
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Bonway Static Block Editor
Bonway Static Block Editor
Researcher
CVE-ID
CVE-2024-51596
CVE-2024-51596
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
WordPress Business Plugin
WordPress Business Plugin
Researcher
CVE-ID
CVE-2024-50553
CVE-2024-50553
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Classy Addons for Elementor
Classy Addons for Elementor
Researcher
CVE-ID
CVE-2024-51580
CVE-2024-51580
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Clever Addons for Elementor
Clever Addons for Elementor
Researcher
CVE-ID
CVE-2024-51680
CVE-2024-51680
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Cresta Addons for Elementor
Cresta Addons for Elementor
Researcher
CVE-ID
CVE-2024-51618
CVE-2024-51618
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Custom Admin Menu
Custom Admin Menu
Researcher
CVE-ID
CVE-2024-51683
CVE-2024-51683
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Custom post type templates for Elementor
Custom post type templates for Elementor
Researcher
CVE-ID
CVE-2024-50545
CVE-2024-50545
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
DataMentor – Best DataTables Plugin for Elementor
DataMentor – Best DataTables Plugin for Elementor
Researcher
Definitive Addons for Elementor <= 1.5.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2024-51587
CVE-2024-51587
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Definitive Addons for Elementor
Definitive Addons for Elementor
Researcher
CVE-ID
CVE-2024-51676
CVE-2024-51676
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Delisho – Recipe Widgets and Blocks
Delisho – Recipe Widgets and Blocks
Researcher
CVE-ID
CVE-2024-51610
CVE-2024-51610
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Display Terms Shortcode
Display Terms Shortcode
Researcher
CVE-ID
CVE-2024-9600
CVE-2024-9600
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Ditty – Responsive News Tickers, Sliders, and Lists
Ditty – Responsive News Tickers, Sliders, and Lists
Researcher
Easy SVG Upload <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
6.4
CVE-ID
CVE-2024-9708
CVE-2024-9708
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Easy SVG Upload
Easy SVG Upload
Researcher
CVE-ID
CVE-2024-10310
CVE-2024-10310
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows)
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows)
Researcher
CVE-ID
CVE-2024-51586
CVE-2024-51586
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Elementary Addons
Elementary Addons
Researcher
CVE-ID
CVE-2024-51678
CVE-2024-51678
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Elo Rating Shortcode
Elo Rating Shortcode
Researcher
CVE-ID
CVE-2024-51609
CVE-2024-51609
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Emoji Shortcode
Emoji Shortcode
Researcher
CVE-ID
CVE-2024-50551
CVE-2024-50551
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
EndomondoWP
EndomondoWP
Researcher
CVE-ID
CVE-2024-51575
CVE-2024-51575
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Extender All In One For Elementor
Extender All In One For Elementor
Researcher
CVE-ID
CVE-2024-51628
CVE-2024-51628
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
EzyOnlineBookings Online Booking System Widget
EzyOnlineBookings Online Booking System Widget
Researcher
CVE-ID
CVE-2024-50536
CVE-2024-50536
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
GDReseller
GDReseller
Researcher
CVE-ID
CVE-2024-9165
CVE-2024-9165
Patch Status
Patched
Patched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported)
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported)
Researcher
CVE-ID
CVE-2024-51594
CVE-2024-51594
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Gmap Point List
Gmap Point List
Researcher
CVE-ID
CVE-2024-9655
CVE-2024-9655
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Gutenberg Blocks with AI by Kadence WP – Page Builder Features
Gutenberg Blocks with AI by Kadence WP – Page Builder Features
Researcher
CVE-ID
CVE-2024-51629
CVE-2024-51629
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Header Footer Composer for Elementor
Header Footer Composer for Elementor
Researcher
CVE-ID
CVE-2024-51590
CVE-2024-51590
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Hoo Addons for Elementor
Hoo Addons for Elementor
Researcher
CVE-ID
CVE-2024-50552
CVE-2024-50552
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Hover Video Preview
Hover Video Preview
Researcher
CVE-ID
CVE-2024-51682
CVE-2024-51682
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
HT Builder – WordPress Theme Builder for Elementor
HT Builder – WordPress Theme Builder for Elementor
Researcher
CVE-ID
CVE-2024-51673
CVE-2024-51673
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
HT Politic – For Political WordPress Themes / Website
HT Politic – For Political WordPress Themes / Website
Researcher
CVE-ID
CVE-2024-10223
CVE-2024-10223
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
WP Team – WordPress Team Member Plugin
WP Team – WordPress Team Member Plugin
Researcher
CVE-ID
CVE-2024-50517
CVE-2024-50517
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
ID-SK Toolkit
ID-SK Toolkit
Researcher
CVE-ID
CVE-2024-10104
CVE-2024-10104
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Jobs for WordPress
Jobs for WordPress
Researcher
CVE-ID
CVE-2024-9376
CVE-2024-9376
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Kata Plus – Addons for Elementor – Widgets, Extensions and Templates
Kata Plus – Addons for Elementor – Widgets, Extensions and Templates
Researcher
CVE-ID
CVE-2024-51583
CVE-2024-51583
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Kento Ads Rotator
Kento Ads Rotator
Researcher
CVE-ID
CVE-2024-51677
CVE-2024-51677
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Knowledge Base
Knowledge Base
Researcher
CVE-ID
CVE-2024-51572
CVE-2024-51572
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
LH QR Codes
LH QR Codes
Researcher
CVE-ID
CVE-2024-51665
CVE-2024-51665
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Marquee Elementor with Posts <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2024-51584
CVE-2024-51584
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Marquee Elementor with Posts
Marquee Elementor with Posts
Researcher
CVE-ID
CVE-2024-51571
CVE-2024-51571
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
MasterBip para Elementor
MasterBip para Elementor
Researcher
CVE-ID
CVE-2024-10000
CVE-2024-10000
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Masteriyo LMS – eLearning and Online Course Builder for WordPress
Masteriyo LMS – eLearning and Online Course Builder for WordPress
Researcher
CVE-ID
CVE-2024-10482
CVE-2024-10482
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO – Media Library Tools
Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO – Media Library Tools
Researcher
CVE-ID
CVE-2024-51604
CVE-2024-51604
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Media Modal
Media Modal
Researcher
CVE-ID
CVE-2024-51592
CVE-2024-51592
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Meta Store Elements
Meta Store Elements
Researcher
CVE-ID
CVE-2024-51573
CVE-2024-51573
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
ML Responsive Audio player with playlist Shortcode
ML Responsive Audio player with playlist Shortcode
Researcher
CVE-ID
CVE-2024-50546
CVE-2024-50546
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
MyOrderDesk
MyOrderDesk
Researcher
CVE-ID
CVE-2024-10181
CVE-2024-10181
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Newsletters
Newsletters
Researcher
CVE-ID
CVE-2024-51603
CVE-2024-51603
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
NMR Strava activities
NMR Strava activities
Researcher
CVE-ID
CVE-2024-10367
CVE-2024-10367
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Researcher
CVE-ID
CVE-2024-11502
CVE-2024-11502
Patch Status
Unpatched
Unpatched
Published
Nov 3, 2024
Nov 3, 2024
Affected Software
Planning Center Online Giving
Planning Center Online Giving
Researcher
CVE-ID
CVE-2024-50513
CVE-2024-50513
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX
Researcher
CVE-ID
CVE-2024-10266
CVE-2024-10266
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Premium Addons for Elementor
Premium Addons for Elementor
Researcher
CVE-ID
CVE-2024-50518
CVE-2024-50518
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Researcher
CVE-ID
CVE-2024-51612
CVE-2024-51612
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Reftagger Shortcode
Reftagger Shortcode
Researcher
CVE-ID
CVE-2024-51581
CVE-2024-51581
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Restaurant & Cafe Addon for Elementor
Restaurant & Cafe Addon for Elementor
Researcher
CVE-ID
CVE-2024-50542
CVE-2024-50542
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
RLM Elementor Widgets Pack
RLM Elementor Widgets Pack
Researcher
CVE-ID
CVE-2024-51585
CVE-2024-51585
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Sales Page Addon – Elementor & Beaver Builder
Sales Page Addon – Elementor & Beaver Builder
Researcher
CVE-ID
CVE-2024-51674
CVE-2024-51674
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Researcher
CVE-ID
CVE-2024-51598
CVE-2024-51598
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Selar.co Widget
Selar.co Widget
Researcher
CVE-ID
CVE-2024-50538
CVE-2024-50538
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Show Visitor IP Address
Show Visitor IP Address
Researcher
CVE-ID
CVE-2024-51599
CVE-2024-51599
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Simple Business Manager
Simple Business Manager
Researcher
CVE-ID
CVE-2024-51574
CVE-2024-51574
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Simple Goods
Simple Goods
Researcher
SIP Reviews Shortcode for WooCommerce <= 1.2.3 - Authenticated (Contributor+) Cross-Site Scripting
6.4
CVE-ID
CVE-2024-6480
CVE-2024-6480
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
SIP Reviews Shortcode for WooCommerce
SIP Reviews Shortcode for WooCommerce
Researchers
CVE-ID
CVE-2024-51595
CVE-2024-51595
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
SKSDEV Toolkit
SKSDEV Toolkit
Researcher
CVE-ID
CVE-2024-50537
CVE-2024-50537
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Smart Mockups
Smart Mockups
Researcher
CVE-ID
CVE-2024-10233
CVE-2024-10233
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
SMS Alert Order Notifications – WooCommerce
SMS Alert Order Notifications – WooCommerce
Researcher
CVE-ID
CVE-2024-50535
CVE-2024-50535
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Step by Step
Step by Step
Researcher
CVE-ID
CVE-2024-10185
CVE-2024-10185
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
StreamWeasels YouTube Integration
StreamWeasels YouTube Integration
Researcher
CVE-ID
CVE-2024-51588
CVE-2024-51588
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Super Addons for Elementor
Super Addons for Elementor
Researcher
CVE-ID
CVE-2024-10184
CVE-2024-10184
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
StreamWeasels Kick Integration
StreamWeasels Kick Integration
Researcher
T(-) Countdown <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-ID
CVE-2024-9884
CVE-2024-9884
Patch Status
Unpatched
Unpatched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
T(-) Countdown
T(-) Countdown
Researcher
CVE-ID
CVE-2024-50547
CVE-2024-50547
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Themedy Toolbox
Themedy Toolbox
Researcher
CVE-ID
CVE-2024-51597
CVE-2024-51597
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
ThemeShark Templates & Widgets for Elementor
ThemeShark Templates & Widgets for Elementor
Researcher
CVE-ID
CVE-2024-51613
CVE-2024-51613
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
TradeMe widgets
TradeMe widgets
Researcher
CVE-ID
CVE-2024-8627
CVE-2024-8627
Patch Status
Unpatched
Unpatched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Ultimate TinyMCE
Ultimate TinyMCE
Researcher
CVE-ID
CVE-2024-9885
CVE-2024-9885
Patch Status
Unpatched
Unpatched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Widget or Sidebar Shortcode
Widget or Sidebar Shortcode
Researcher
CVE-ID
CVE-2024-9886
CVE-2024-9886
Patch Status
Unpatched
Unpatched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
WP Baidu Map
WP Baidu Map
Researcher
CVE-ID
CVE-2024-51622
CVE-2024-51622
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
WP EASY RECIPE
WP EASY RECIPE
Researcher
CVE-ID
CVE-2024-51611
CVE-2024-51611
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
WP Feature Box
WP Feature Box
Researcher
CVE-ID
CVE-2024-51681
CVE-2024-51681
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
WP Pocket URLs
WP Pocket URLs
Researcher
CVE-ID
CVE-2024-9446
CVE-2024-9446
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
WP Simple Anchors Links
WP Simple Anchors Links
Researcher
CVE-ID
CVE-2024-51593
CVE-2024-51593
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Курс валют UAH
Курс валют UAH
Researcher
CVE-ID
CVE-2024-51644
CVE-2024-51644
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Addressbook
Addressbook
Researcher
CVE-ID
CVE-2024-51637
CVE-2024-51637
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Admin SMS Alert
Admin SMS Alert
Researcher
CVE-ID
CVE-2024-51641
CVE-2024-51641
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Advanced PDF Generator
Advanced PDF Generator
Researcher
CVE-ID
CVE-2024-51643
CVE-2024-51643
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Amazon Associate Filter
Amazon Associate Filter
Researcher
CVE-ID
CVE-2024-51654
CVE-2024-51654
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
APK Downloader
APK Downloader
Researcher
CVE-ID
CVE-2024-51679
CVE-2024-51679
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Appointmind
Appointmind
Researcher
CVE-ID
CVE-2024-51638
CVE-2024-51638
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Awesome Shortcodes For Genesis
Awesome Shortcodes For Genesis
Researcher
CVE-ID
CVE-2024-9896
CVE-2024-9896
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
BBP Core – Expand bbPress powered forums with useful features
BBP Core – Expand bbPress powered forums with useful features
Researcher
CVE-ID
CVE-2024-51655
CVE-2024-51655
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Custom Author URL
Custom Author URL
Researcher
CVE-ID
CVE-2024-50533
CVE-2024-50533
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Domain Sharding
Domain Sharding
Researcher
CVE-ID
CVE-2024-51648
CVE-2024-51648
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
e-shopsカート2
e-shopsカート2
Researcher
Events Manager Pro – extended <= 0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
6.1
CVE-ID
CVE-2024-50532
CVE-2024-50532
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Events Manager Pro – extended
Events Manager Pro – extended
Researcher
CVE-ID
CVE-2024-51647
CVE-2024-51647
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Featured Posts Scroll
Featured Posts Scroll
Researcher
CVE-ID
CVE-2024-51656
CVE-2024-51656
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Flash Show And Hide Box
Flash Show And Hide Box
Researcher
FraudLabs Pro SMS Verification <= 1.10.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-ID
CVE-2024-51688
CVE-2024-51688
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
FraudLabs Pro SMS Verification
FraudLabs Pro SMS Verification
Researcher
CVE-ID
CVE-2024-51636
CVE-2024-51636
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Plugin Name: GMO Social Connection
Plugin Name: GMO Social Connection
Researcher
CVE-ID
CVE-2024-50519
CVE-2024-50519
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Jigoshop – Store Exporter
Jigoshop – Store Exporter
Researcher
CVE-ID
CVE-2024-51640
CVE-2024-51640
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
MDR Webmaster Tools
MDR Webmaster Tools
Researcher
CVE-ID
CVE-2024-51639
CVE-2024-51639
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Naver Blog
Naver Blog
Researcher
CVE-ID
CVE-2024-51687
CVE-2024-51687
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Platform.ly Official
Platform.ly Official
Researcher
CVE-ID
CVE-2024-10048
CVE-2024-10048
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Researcher
CVE-ID
CVE-2024-8871
CVE-2024-8871
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Pricing Tables WordPress Plugin – Easy Pricing Tables
Pricing Tables WordPress Plugin – Easy Pricing Tables
Researcher
CVE-ID
CVE-2024-51650
CVE-2024-51650
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Random Featured Post
Random Featured Post
Researcher
CVE-ID
CVE-2024-8739
CVE-2024-8739
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
ReCaptcha Integration for WordPress
ReCaptcha Integration for WordPress
Researcher
CVE-ID
CVE-2024-51630
CVE-2024-51630
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Responsive Flickr Gallery
Responsive Flickr Gallery
Researcher
CVE-ID
CVE-2024-9438
CVE-2024-9438
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
SEUR Oficial
SEUR Oficial
Researcher
CVE-ID
CVE-2024-51632
CVE-2024-51632
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
SH Slideshow
SH Slideshow
Researcher
Simple Page Specific Sidebars <= 2.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-ID
CVE-2024-51633
CVE-2024-51633
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Simple Page Specific Sidebars
Simple Page Specific Sidebars
Researcher
CVE-ID
CVE-2024-51657
CVE-2024-51657
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
SmartLink Dynamic URLs
SmartLink Dynamic URLs
Researcher
CVE-ID
CVE-2024-51631
CVE-2024-51631
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Sticky Social Bar
Sticky Social Bar
Researcher
CVE-ID
CVE-2024-8792
CVE-2024-8792
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Subscribe to Comments
Subscribe to Comments
Researcher
CVE-ID
CVE-2024-51645
CVE-2024-51645
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
ThemeFuse Maintenance Mode
ThemeFuse Maintenance Mode
Researcher
CVE-ID
CVE-2024-51659
CVE-2024-51659
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Twitter @Anywhere Plus
Twitter @Anywhere Plus
Researcher
CVE-ID
CVE-2024-51653
CVE-2024-51653
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
UPDATE NOTIFICATIONS
UPDATE NOTIFICATIONS
Researcher
CVE-ID
CVE-2024-51634
CVE-2024-51634
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Webriti Custom Login
Webriti Custom Login
Researcher
CVE-ID
CVE-2024-50522
CVE-2024-50522
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
WeChat Subscribers Lite 微信公众订阅号插件
WeChat Subscribers Lite 微信公众订阅号插件
Researcher
CVE-ID
CVE-2024-51635
CVE-2024-51635
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
While Loading
While Loading
Researcher
CVE-ID
CVE-2024-50534
CVE-2024-50534
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
World Prayer Time
World Prayer Time
Researcher
CVE-ID
CVE-2024-51658
CVE-2024-51658
Patch Status
Unpatched
Unpatched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
WP Course Manager
WP Course Manager
Researcher
CVE-ID
CVE-2024-9434
CVE-2024-9434
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
WPGlobus Translate Options
WPGlobus Translate Options
Researcher
CVE-ID
CVE-2024-9868
CVE-2024-9868
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows)
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows)
Researcher
CVE-ID
CVE-2024-7424
CVE-2024-7424
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Multiple Page Generator Plugin – MPG
Multiple Page Generator Plugin – MPG
Researcher
CVE-ID
CVE-2024-10540
CVE-2024-10540
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress
Researcher
CVE-ID
CVE-2024-9700
CVE-2024-9700
Patch Status
Patched
Patched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Researcher
CVE-ID
CVE-2024-9430
CVE-2024-9430
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Get Quote For Woocommerce – Request A Quote For Woocommerce
Get Quote For Woocommerce – Request A Quote For Woocommerce
Researcher
CVE-ID
CVE-2024-50528
CVE-2024-50528
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder
Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder
Researcher
CVE-ID
CVE-2024-10544
CVE-2024-10544
Patch Status
Unpatched
Unpatched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
Woo Manage Fraud Orders
Woo Manage Fraud Orders
Researcher
CVE-ID
CVE-2024-51672
CVE-2024-51672
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
CVE-ID
CVE-2023-5816
CVE-2023-5816
Patch Status
Unpatched
Unpatched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Code Explorer
Code Explorer
Researcher
CVE-ID
CVE-2024-9828
CVE-2024-9828
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Taskbuilder – WordPress Project & Task Management plugin
Taskbuilder – WordPress Project & Task Management plugin
Researcher
CVE-ID
CVE-2024-51664
CVE-2024-51664
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Beds24 Online Booking
Beds24 Online Booking
Researcher
Bricksable for Bricks Builder <= 1.6.59 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-ID
CVE-2024-51663
CVE-2024-51663
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Bricksable for Bricks Builder
Bricksable for Bricks Builder
Researcher
CVE-ID
CVE-2024-50516
CVE-2024-50516
Patch Status
Unpatched
Unpatched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Countdown, Coming Soon, Maintenance – Countdown & Clock
Countdown, Coming Soon, Maintenance – Countdown & Clock
Researcher
CVE-ID
CVE-2024-9768
CVE-2024-9768
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
Researcher
CVE-ID
CVE-2024-51670
CVE-2024-51670
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
JS Help Desk – The Ultimate Help Desk & Support Plugin
JS Help Desk – The Ultimate Help Desk & Support Plugin
Researcher
CVE-ID
CVE-2024-10103
CVE-2024-10103
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
MailPoet – Newsletters, Email Marketing, and Automation
MailPoet – Newsletters, Email Marketing, and Automation
Researcher
CVE-ID
CVE-2024-51668
CVE-2024-51668
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
MyCurator Content Curation
MyCurator Content Curation
Researcher
CVE-ID
CVE-2024-50515
CVE-2024-50515
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Ninja Forms – The Contact Form Builder That Grows With You
Ninja Forms – The Contact Form Builder That Grows With You
Researcher
CVE-ID
CVE-2024-50514
CVE-2024-50514
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Ninja Forms – The Contact Form Builder That Grows With You
Ninja Forms – The Contact Form Builder That Grows With You
Researcher
CVE-ID
CVE-2024-10515
CVE-2024-10515
Patch Status
Patched
Patched
Published
Oct 30, 2024
Oct 30, 2024
Affected Software
SEO Plugin by Squirrly SEO
SEO Plugin by Squirrly SEO
Researcher
CVE-ID
CVE-2024-8157
CVE-2024-8157
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
Alphabetical List
Alphabetical List
Researcher
CVE-ID
CVE-2024-10677
CVE-2024-10677
Patch Status
Unpatched
Unpatched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
BTEV
BTEV
Researcher
CVE-ID
CVE-2024-5030
CVE-2024-5030
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
CM Table Of Contents – WordPress TOC Plugin
CM Table Of Contents – WordPress TOC Plugin
Researcher
CVE-ID
CVE-2024-5029
CVE-2024-5029
Patch Status
Patched
Patched
Published
Oct 31, 2024
Oct 31, 2024
Affected Software
CM Table Of Contents – WordPress TOC Plugin
CM Table Of Contents – WordPress TOC Plugin
Researcher
CVE-ID
CVE-2024-10399
CVE-2024-10399
Patch Status
Patched
Patched
Published
Oct 29, 2024
Oct 29, 2024
Affected Software
Download Monitor
Download Monitor
Researcher
CVE-ID
CVE-2024-51669
CVE-2024-51669
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Dynamic Widgets
Dynamic Widgets
Researcher
CVE-ID
CVE-2024-51660
CVE-2024-51660
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Easy Accordion Gutenberg Block
Easy Accordion Gutenberg Block
Researcher
CVE-ID
CVE-2024-10312
CVE-2024-10312
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Exclusive Addons for Elementor
Exclusive Addons for Elementor
Researcher
CVE-ID
CVE-2024-51686
CVE-2024-51686
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Manage User Columns
Manage User Columns
Researcher
CVE-ID
CVE-2024-10360
CVE-2024-10360
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
Move Addons for Elementor
Move Addons for Elementor
Researcher
CVE-ID
CVE-2024-51671
CVE-2024-51671
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Researcher
CVE-ID
CVE-2024-51667
CVE-2024-51667
Patch Status
Patched
Patched
Published
Nov 1, 2024
Nov 1, 2024
Affected Software
Paytium: Mollie payment forms & donations
Paytium: Mollie payment forms & donations
Researcher
CVE-ID
CVE-2024-10437
CVE-2024-10437
Patch Status
Patched
Patched
Published
Oct 28, 2024
Oct 28, 2024
Affected Software
WPC Smart Messages for WooCommerce
WPC Smart Messages for WooCommerce
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments