Vulnerabilities > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-20 | CVE-2024-47634 | Cross-Site Request Forgery (CSRF) vulnerability in Majas-Lapu-Izstrade Cartbounty Cross-Site Request Forgery (CSRF) vulnerability in Streamline.Lv CartBounty – Save and recover abandoned carts for WooCommerce allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a through 8.2. | 9.8 |
| 2024-10-20 | CVE-2024-10195 | SQL Injection vulnerability in Tecno-Mobile 4G Portable Wifi Tr118 Firmware V00820220830 A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. | 9.8 |
| 2024-10-20 | CVE-2024-49324 | Unrestricted Upload of File with Dangerous Type vulnerability in Sovratec Case Management Unrestricted Upload of File with Dangerous Type vulnerability in Sovratec Sovratec Case Management allows Upload a Web Shell to a Web Server.This issue affects Sovratec Case Management: from n/a through 1.0.0. | 9.8 |
| 2024-10-20 | CVE-2024-49326 | Unrestricted Upload of File with Dangerous Type vulnerability in Vasiliskerasiotis Affiliator Unrestricted Upload of File with Dangerous Type vulnerability in Vasilis Kerasiotis Affiliator allows Upload a Web Shell to a Web Server.This issue affects Affiliator: from n/a through 2.1.3. | 9.8 |
| 2024-10-20 | CVE-2024-49327 | Unrestricted Upload of File with Dangerous Type vulnerability in Asepbagjapriandana Woostagram Connect Unrestricted Upload of File with Dangerous Type vulnerability in Asep Bagja Priandana Woostagram Connect allows Upload a Web Shell to a Web Server.This issue affects Woostagram Connect: from n/a through 1.0.2. | 9.8 |
| 2024-10-20 | CVE-2024-49329 | Unrestricted Upload of File with Dangerous Type vulnerability in Vivektamrakar WP Rest API FNS Unrestricted Upload of File with Dangerous Type vulnerability in Vivek Tamrakar WP REST API FNS allows Upload a Web Shell to a Web Server.This issue affects WP REST API FNS: from n/a through 1.0.0. | 9.8 |
| 2024-10-20 | CVE-2024-49330 | Unrestricted Upload of File with Dangerous Type vulnerability in Brx8R Nice Backgrounds Unrestricted Upload of File with Dangerous Type vulnerability in brx8r Nice Backgrounds allows Upload a Web Shell to a Web Server.This issue affects Nice Backgrounds: from n/a through 1.0. | 9.8 |
| 2024-10-20 | CVE-2024-49332 | Deserialization of Untrusted Data vulnerability in Giveawayboost Giveaway Boost Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4. | 9.8 |
| 2024-10-20 | CVE-2024-49607 | Unrestricted Upload of File with Dangerous Type vulnerability in Redwanhilali WP Dropbox Dropins Unrestricted Upload of File with Dangerous Type vulnerability in Redwan Hilali WP Dropbox Dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through 1.0. | 9.8 |
| 2024-10-20 | CVE-2024-49610 | Unrestricted Upload of File with Dangerous Type vulnerability in Jackzhu Photokit Unrestricted Upload of File with Dangerous Type vulnerability in Jack Zhu allows Upload a Web Shell to a Web Server.This issue affects photokit: from n/a through 1.0. | 9.8 |