Skip to content
OpenAdvisories

Archive

16 November 2024

Vulnerabilities first published on this day (UTC), newest first.

← October 2024 2024 / November /16 December 2024 →
  1. 1235
  2. 212
  3. 317
  4. 4148
  5. 5211
  6. 694
  7. 7115
  8. 8122
  9. 9195
  10. 1035
  11. 11114
  12. 12338
  13. 13230
  14. 14149
  15. 15222
  16. 1650
  17. 1711
  18. 18185
  19. 19388
  20. 20123
  21. 21130
  22. 22388
  23. 2345
  24. 2416
  25. 2577
  26. 26162
  27. 2782
  28. 2875
  29. 2976
  30. 3029
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2024-52415

    WordPress SK WP Settings Backup plugin <= 1.0 - CSRF to PHP Object Injection vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in skipstorm SK WP Settings Backup sk-wp-settings-backup allows Object Injection.This issue affects SK WP Settings Backup: from n/a through <= 1.0.

    skipstorm SK WP Settings Backup
  • High 7.2
    CVE-2024-9887

    Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection

    The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.15.6 due to insufficient escaping on the user supplied parameter and lack of suffi…

    cyberlord92 SAML IDP (Identity Provider) – Login with Website Users Web / CMS
  • High 7.5
    CVE-2024-10645

    Blogger 301 Redirect <= 2.5.3 - Unauthenticated SQL Injection via br

    The Blogger 301 Redirect plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘br’ parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on …

    sudiptomahato Blogger 301 Redirect Web / CMS
  • High 8.8
    CVE-2024-10728 Public exploit EPSS 39%

    PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation

    The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_required_plugin_callback' function in all versions up to, and …

    wpxpo Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX Web / CMS
  • High 7.3
    CVE-2024-9839

    Uix Slideshow <= 1.6.5 - Unauthenticated Arbitrary Shortcode Execution

    The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_sh…

    UIUX Lab Uix Slideshow Web / CMS
  • High 7.5
    CVE-2024-9935 Public exploit Scanner template

    PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download

    The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.0.0 via the rtw_pgaepb_dwnld_pdf() function. This makes it possible for unauthenticated attackers to read the conte…

    RedefiningTheWeb PDF Generator for WordPress Elementor Web / CMS
  • High 8.8
    CVE-2024-9192

    WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update

    The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_request_result() function in all versions up to, and including,…

    pressaholic WordPress Video Robot - The Ultimate Video Importer Web / CMS
  • High 8.8
    CVE-2024-9849

    Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder <= 4.8 - Authenticated (Author+) Arbitrary File Upload

    The Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and including, 4.8. This m…

    Creative interactive media Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder Web / CMS