Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-12-09 CVE-2023-47869 Cross-site Scripting vulnerability in Gvectors Wpforo Forum
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affects wpForo Forum: from n/a through 2.2.5.
network
low complexity
gvectors CWE-79
5.4
2024-12-09 CVE-2023-49831 Missing Authorization vulnerability in Metagauss Registrationmagic
Missing Authorization vulnerability in Metagauss User Registration Forms RegistrationMagic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through 5.2.3.0.
network
low complexity
metagauss CWE-862
7.5
2024-12-09 CVE-2023-51359 Missing Authorization vulnerability in Wpdeveloper Essential Blocks
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0.
network
low complexity
wpdeveloper CWE-862
8.8
2024-12-09 CVE-2023-51360 Missing Authorization vulnerability in Wpdeveloper Essential Blocks
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0.
network
low complexity
wpdeveloper CWE-862
8.8
2024-12-09 CVE-2024-53816 Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons
Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.5.
network
low complexity
themeum CWE-862
8.8
2024-12-09 CVE-2024-12357 Unspecified vulnerability in Mayurik Best House Rental Management System 1.0
A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic.
network
low complexity
mayurik
5.3
2024-12-09 CVE-2024-12358 OS Command Injection vulnerability in Datax-Web Project Datax-Web 2.1.1
A vulnerability was found in WeiYe-Jing datax-web 2.1.1.
network
low complexity
datax-web-project CWE-78
8.8
2024-12-09 CVE-2024-12359 Cross-site Scripting vulnerability in Code-Projects Admin Dashboard 1.0
A vulnerability was found in code-projects Admin Dashboard 1.0.
network
low complexity
code-projects CWE-79
5.4
2024-12-09 CVE-2024-12360 SQL Injection vulnerability in Online Class and Exam Scheduling System Project Online Class and Exam Scheduling System 1.0
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0.
8.8
2024-12-09 CVE-2024-12352 Out-of-bounds Write vulnerability in Totolink Ex1800T Firmware 9.1.0Cu.2112B20220316
A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316.
network
low complexity
totolink CWE-787
critical
9.8