| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-37250 | WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability | WPEngine Inc. | Advanced Custom Fields PRO | Medium | 5.4 | 2024-11-01 14:18:41 | Deep Dive |
| CVE-2024-37249 | WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability | WPEngine Inc. | Advanced Custom Fields PRO | Medium | 4.3 | 2024-11-01 14:18:40 | Deep Dive |
| CVE-2024-37119 | WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability | Uncanny Owl | Uncanny Automator Pro | Medium | 5.3 | 2024-11-01 14:18:37 | Deep Dive |
| CVE-2024-37277 | WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability | Paid Memberships Pro | Paid Memberships Pro | High | 7.5 | 2024-11-01 14:18:27 | Deep Dive |
| CVE-2024-37439 | WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability | Uncanny Owl | Uncanny Toolkit Pro for LearnDash | Medium | 5.4 | 2024-11-01 14:18:23 | Deep Dive |
| CVE-2024-37929 | WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability | solwin | User Activity Log Pro | Medium | 6.3 | 2024-11-01 14:18:10 | Deep Dive |
| CVE-2024-38740 | WordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerability | Packlink Shipping S.L. | Packlink PRO shipping module | Medium | 5.4 | 2024-11-01 14:18:02 | Deep Dive |
| CVE-2024-50426 | WordPress Survey Maker plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability | Ays Pro | Survey Maker | Medium | 5.9 | 2024-10-29 08:43:38 | Deep Dive |
| CVE-2024-22065 | ZTE MF258 Pro product has a OS Command injection vulnerability | ZTE | MF258 Pro | Medium | 6.8 | 2024-10-29 01:58:29 | Deep Dive |
| CVE-2024-9475 | Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter | ays-pro | Poll Maker – Versus Polls, Anonymous Polls, Image Polls | Medium | 4.9 | 2024-10-26 01:58:37 | Deep Dive |
| CVE-2024-9462 | Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings | ays-pro | Poll Maker – Versus Polls, Anonymous Polls, Image Polls | Medium | 5.5 | 2024-10-26 01:58:37 | Deep Dive |
| CVE-2024-9584 | Image Map Pro <= 6.0.20 - Missing Authorization to Authenticated (Contributor+) Map Project Add/Update/Delete | imagemappro | Image Map Pro – Drag-and-drop Builder for Interactive Images | Medium | 5.4 | 2024-10-25 17:32:20 | Deep Dive |
| CVE-2024-9585 | Image Map Pro <= 6.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting | imagemappro | Image Map Pro – Drag-and-drop Builder for Interactive Images | Medium | 6.4 | 2024-10-25 17:32:19 | Deep Dive |
| CVE-2024-10351 | Tenda RX9 Pro POST Request setMacFilterCfg sub_424CE0 stack-based overflow | Tenda | RX9 Pro | High | 8.8 | 2024-10-24 23:31:12 | Deep Dive |
| CVE-2024-10283 | Tenda RX9/RX9 Pro SetNetControlList sub_4337EC stack-based overflow | Tenda | RX9 | High | 8.8 | 2024-10-23 15:00:12 | Deep Dive |
| CVE-2024-10282 | Tenda RX9/RX9 Pro SetVirtualServerCfg sub_42EA38 stack-based overflow | Tenda | RX9 | High | 8.8 | 2024-10-23 14:31:24 | Deep Dive |
| CVE-2024-10281 | Tenda RX9/RX9 Pro SetStaticRouteCfg sub_42EEE0 stack-based overflow | Tenda | RX9 | High | 8.8 | 2024-10-23 14:00:25 | Deep Dive |
| CVE-2024-9947 | ProfilePress - Pro <= 4.11.1 - Authentication Bypass via WordPress.com OAuth provider | ProfilePress Team | ProfilePress Pro | High | 8.1 | 2024-10-23 06:45:06 | Deep Dive |
| CVE-2024-10183 | Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation | Jamf | Pro | - | - | 2024-10-22 17:50:54 | Deep Dive |
| CVE-2024-49290 | WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability | Gora Tech LLC | Cooked Pro | Medium | 4.3 | 2024-10-20 10:14:58 | Deep Dive |