2024 CVEs (page 125)
Page 125 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43923 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a… |
CVE-2024-43919 | Medium | 5.3 | 2024-11-01 | Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10. |
CVE-2024-43355 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport… |
CVE-2024-43343 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Orde… |
CVE-2024-43341 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency… |
CVE-2024-43332 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo… |
CVE-2024-43323 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from… |
CVE-2024-43314 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2024-43312 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-43310 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2024-43302 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fonts: fro… |
CVE-2024-43298 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a… |
CVE-2024-43297 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a… |
CVE-2024-43296 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2024-43293 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-43290 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through <= 4.0.1. |
CVE-2024-43285 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in Presto Made, Inc Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-43277 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in AyeCode Ltd UsersWP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP… |
CVE-2024-43274 | Medium | 5.8 | 2024-11-01 | Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by A… |
CVE-2024-43273 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in icegram Icegram Collect plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-43270 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec… |
CVE-2024-43268 | Medium | 5.4 | 2024-11-01 | Access Control vulnerability in WPBackItUp Backup and Restore WordPress allows . This issue affects Backup and Restore WordPress: from n/a through 1.50. |
CVE-2024-43260 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-43254 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-43253 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-43235 | High | 7.1 | 2024-11-01 | Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-43229 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through <= 1.4.9. |
CVE-2024-43223 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-43219 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Per… |
CVE-2024-43215 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-43212 | High | 7.5 | 2024-11-01 | Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly… |
CVE-2024-43211 | Medium | 5.9 | 2024-11-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.Th… |
CVE-2024-43209 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Bitly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bitly: from n/a through 2.7.2. |
CVE-2024-43208 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Matt Miller Send Emails with Mandrill send-emails-with-mandrill allows Exploiting Incorrectly Configured Access Control… |
CVE-2024-43162 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy D… |
CVE-2024-43159 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6. |
CVE-2024-43158 | High | 7.5 | 2024-11-01 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4. |
CVE-2024-43157 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft… |
CVE-2024-43154 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in BracketSpace Advanced Cron Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2024-43146 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for WP allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-43143 | Medium | 6.4 | 2024-11-01 | Missing Authorization vulnerability in Roundup WP Registrations for the Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-43142 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS… |
CVE-2024-43136 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3… |
CVE-2024-43134 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-43122 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Creative Motion Robin image optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-43120 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Type… |
CVE-2024-43119 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Aruba.It Aruba HiSpeed Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-43118 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n… |
CVE-2024-39664 | High | 7.3 | 2024-11-01 | Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: fr… |
CVE-2024-39654 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through <= 2.2.12. |
CVE-2024-39650 | High | 7.3 | 2024-11-01 | Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… |
CVE-2024-39640 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in QuadLayers WP Social Feed Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-39639 | Medium | 4.3 | 2024-11-01 | Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2024-39635 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in KaineLabs Youzify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youzify: fr… |
CVE-2024-39625 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a thr… |
CVE-2024-38794 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Cust… |
CVE-2024-38792 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Proper… |
CVE-2024-38783 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix F… |
CVE-2024-38777 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in CreativeMotion Titan Anti-spam & Security allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2024-38774 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-38771 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through <= 4.0. |
CVE-2024-38769 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ar… |
CVE-2024-38748 | Medium | 5.3 | 2024-11-01 | Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9. |
CVE-2024-38745 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesa… |
CVE-2024-38744 | High | 8.3 | 2024-11-01 | Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This… |
CVE-2024-38743 | Medium | 5.3 | 2024-11-01 | Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows . This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0. |
CVE-2024-38740 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-38737 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue… |
CVE-2024-38733 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Meks Meks Video Importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meks… |
CVE-2024-38727 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-38726 | High | 7.5 | 2024-11-01 | Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product… |
CVE-2024-38721 | High | 7.1 | 2024-11-01 | Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDo… |
CVE-2024-38719 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Creative Motion Auto Featured Image (Auto Post Thumbnail) allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2024-38714 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232. |
CVE-2024-38707 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedP… |
CVE-2024-38702 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by… |
CVE-2024-38695 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-38690 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.Thi… |
CVE-2024-37929 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-37926 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff… |
CVE-2024-37921 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chai… |
CVE-2024-37517 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spec… |
CVE-2024-37516 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2024-37510 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2024-37506 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2024-37505 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-37483 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4. |
CVE-2024-37482 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4. |
CVE-2024-37481 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4. |
CVE-2024-37477 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-37475 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newsp… |
CVE-2024-37470 | High | 8.2 | 2024-11-01 | Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woffice Core… |
CVE-2024-37468 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmat… |
CVE-2024-37463 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks F… |
CVE-2024-37456 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Noptin Newsletter Noptin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Noptin: from… |
CVE-2024-37453 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in ProfileGrid User Profiles ProfileGrid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-37444 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security… |
CVE-2024-37443 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Automattic WP Job Manager - Resume Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-37440 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4. |
CVE-2024-37439 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |