Skip to content
OpenAdvisories

Archive

18 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /18 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-8790

    Social Share With Floating Bar <= 1.0.3 - Reflected Cross-Site Scripting

    The Social Share With Floating Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.3. This makes it possible for unauthentic…

    themeinwp Social Share With Floating Bar Web / CMS
  • Medium 6.1
    CVE-2024-10049

    Edit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page

    The Edit WooCommerce Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for una…

    ioannup Edit WooCommerce Templates Web / CMS
  • Medium 6.4
    CVE-2024-8916

    Suki Sites Import <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Suki Sites Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    sukiwp Suki Sites Import Web / CMS
  • Medium 6.4
    CVE-2024-9848

    Product Customizer Light <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Product Customizer Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    k2servicecom Product Customizer Light Web / CMS