# Vulnerabilities published in 2024


- [CVE-2024-53810](https://insights.sbomify.com/CVE-2024-53810/): WordPress Simple User Registration plugin <= 5.5 - Broken Access Control on User Deletion vulnerability (critical 9.1)
- [CVE-2024-5381](https://insights.sbomify.com/CVE-2024-5381/): itsourcecode Student Information Management System view.php sql injection (medium 5.3)
- [CVE-2024-53809](https://insights.sbomify.com/CVE-2024-53809/): WordPress Namaste! LMS plugin <= 2.6.4.1 - Cross Site Request Forgery (CSRF) vulnerability (medium 4.3)
- [CVE-2024-53808](https://insights.sbomify.com/CVE-2024-53808/): WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability (high 8.5)
- [CVE-2024-53807](https://insights.sbomify.com/CVE-2024-53807/): WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability (high 8.5)
- [CVE-2024-53806](https://insights.sbomify.com/CVE-2024-53806/): WordPress Maspik plugin <= 2.2.7 - CSRF to Settings Change vulnerability (medium 5.4)
- [CVE-2024-53805](https://insights.sbomify.com/CVE-2024-53805/): WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability (high 7.5)
- [CVE-2024-53804](https://insights.sbomify.com/CVE-2024-53804/): WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability (high 7.5)
- [CVE-2024-53803](https://insights.sbomify.com/CVE-2024-53803/): WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2024-53802](https://insights.sbomify.com/CVE-2024-53802/): WordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53801](https://insights.sbomify.com/CVE-2024-53801/): WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53800](https://insights.sbomify.com/CVE-2024-53800/): WordPress Rezgo Online Booking plugin <= 4.17 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2024-5380](https://insights.sbomify.com/CVE-2024-5380/): jsy-1 short-url admin.php cross site scripting (medium 5.3)
- [CVE-2024-53799](https://insights.sbomify.com/CVE-2024-53799/): WordPress FloristPress plugin <= 7.3.0 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-53798](https://insights.sbomify.com/CVE-2024-53798/): WordPress FloristPress plugin <= 7.3.0 - Nonce Leakage to Broken Access Control vulnerability (medium 5.4)
- [CVE-2024-53797](https://insights.sbomify.com/CVE-2024-53797/): WordPress Beaver Builder plugin <= 2.8.4.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53796](https://insights.sbomify.com/CVE-2024-53796/): WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53795](https://insights.sbomify.com/CVE-2024-53795/): WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2024-53794](https://insights.sbomify.com/CVE-2024-53794/): WordPress Arkhe Blocks plugin <= 2.27.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53793](https://insights.sbomify.com/CVE-2024-53793/): WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability (high 8.2)
- [CVE-2024-53792](https://insights.sbomify.com/CVE-2024-53792/): WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability (high 8.5)
- [CVE-2024-53791](https://insights.sbomify.com/CVE-2024-53791/): WordPress Lenxel Core plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53790](https://insights.sbomify.com/CVE-2024-53790/): WordPress Lenxel Core plugin <= 1.2.8 - Local File Inclusion vulnerability (high 7.5)
- [CVE-2024-5379](https://insights.sbomify.com/CVE-2024-5379/): JFinalCMS template cross site scripting (medium 5.3)
- [CVE-2024-53789](https://insights.sbomify.com/CVE-2024-53789/): Cross-site request forgery in Advanced What should we write next about (high 7.1)
- [CVE-2024-53788](https://insights.sbomify.com/CVE-2024-53788/): WordPress WordPress Portfolio Builder – Portfolio Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability (medium 5.9)
- [CVE-2024-53787](https://insights.sbomify.com/CVE-2024-53787/): WordPress Random Banner plugin <= 4.2.12 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53786](https://insights.sbomify.com/CVE-2024-53786/): WordPress Cowidgets – Elementor Addons plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53785](https://insights.sbomify.com/CVE-2024-53785/): WordPress Chatter plugin <= 1.0.1 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-53784](https://insights.sbomify.com/CVE-2024-53784/): WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.0.4 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-53783](https://insights.sbomify.com/CVE-2024-53783/): WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability (high 7.6)
- [CVE-2024-53782](https://insights.sbomify.com/CVE-2024-53782/): WordPress Photo Video Store plugin <= 21.07 - CSRF to Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53781](https://insights.sbomify.com/CVE-2024-53781/): WordPress SpatialMatch IDX plugin <= 3.0.9 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53780](https://insights.sbomify.com/CVE-2024-53780/): WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-5378](https://insights.sbomify.com/CVE-2024-5378/): SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection (medium 5.3)
- [CVE-2024-53779](https://insights.sbomify.com/CVE-2024-53779/): WordPress Yahoo! WebPlayer plugin <= 2.0.6 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53778](https://insights.sbomify.com/CVE-2024-53778/): WordPress Essential Breadcrumbs plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53777](https://insights.sbomify.com/CVE-2024-53777/): WordPress Simple Header and Footer plugin <= 1.0.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53776](https://insights.sbomify.com/CVE-2024-53776/): WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53775](https://insights.sbomify.com/CVE-2024-53775/): WordPress DancePress (TRWA) plugin <= 3.1.11 - Cross Site Request Forgery (CSRF) vulnerability (medium 4.3)
- [CVE-2024-53774](https://insights.sbomify.com/CVE-2024-53774/): WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53773](https://insights.sbomify.com/CVE-2024-53773/): WordPress Znajdź Pracę z Praca.pl plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53772](https://insights.sbomify.com/CVE-2024-53772/): WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53771](https://insights.sbomify.com/CVE-2024-53771/): WordPress SimpleSchema plugin <= 1.7.6.9 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53770](https://insights.sbomify.com/CVE-2024-53770/): WordPress RingCentral Communications plugin <= 1.7.0 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-5377](https://insights.sbomify.com/CVE-2024-5377/): SourceCodester Vehicle Management System newvehicle.php unrestricted upload (medium 6.9)
- [CVE-2024-53769](https://insights.sbomify.com/CVE-2024-53769/): WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53768](https://insights.sbomify.com/CVE-2024-53768/): WordPress Content Audit Exporter plugin <= 1.1 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2024-53767](https://insights.sbomify.com/CVE-2024-53767/): WordPress Pixobe Cartography plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53766](https://insights.sbomify.com/CVE-2024-53766/): WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53765](https://insights.sbomify.com/CVE-2024-53765/): WordPress Mins To Read plugin <= 1.2.2 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53764](https://insights.sbomify.com/CVE-2024-53764/): WordPress Softtemplates For Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53763](https://insights.sbomify.com/CVE-2024-53763/): WordPress Best Addons for Elementor plugin <=1.0.5 - Stored Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53762](https://insights.sbomify.com/CVE-2024-53762/): WordPress FastBook plugin <= 1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53761](https://insights.sbomify.com/CVE-2024-53761/): WordPress WP Revisions Manager plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability (medium 5.4)
- [CVE-2024-53760](https://insights.sbomify.com/CVE-2024-53760/): WordPress Capitalize My Title WordPress plugin <= 0.5.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-5376](https://insights.sbomify.com/CVE-2024-5376/): Kashipara College Management System view_each_faculty.php cross site scripting (medium 5.3)
- [CVE-2024-53759](https://insights.sbomify.com/CVE-2024-53759/): WordPress ArCa Payment Gateway plugin <= 1.3.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53758](https://insights.sbomify.com/CVE-2024-53758/): WordPress WP MathJax plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53757](https://insights.sbomify.com/CVE-2024-53757/): WordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53756](https://insights.sbomify.com/CVE-2024-53756/): WordPress Vertical Carousel plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53755](https://insights.sbomify.com/CVE-2024-53755/): WordPress Third Party Cookie Eraser plugin <= 1.0.2 - CSRF to Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53754](https://insights.sbomify.com/CVE-2024-53754/): WordPress Out Of Stock Badge plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability (high 7.1)
- [CVE-2024-53753](https://insights.sbomify.com/CVE-2024-53753/): WordPress CultBooking Hotel Booking Engine plugin <= 2.1 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53752](https://insights.sbomify.com/CVE-2024-53752/): WordPress Stripe Donation plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53751](https://insights.sbomify.com/CVE-2024-53751/): WordPress Build App Online plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) vulnerability (medium 5.4)
- [CVE-2024-53750](https://insights.sbomify.com/CVE-2024-53750/): WordPress PayPal Responder plugin <= 1.2 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-5375](https://insights.sbomify.com/CVE-2024-5375/): Kashipara College Management System submit_student.php cross site scripting (medium 5.3)
- [CVE-2024-53749](https://insights.sbomify.com/CVE-2024-53749/): WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53748](https://insights.sbomify.com/CVE-2024-53748/): WordPress WP Mermaid plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53747](https://insights.sbomify.com/CVE-2024-53747/): WordPress Video Player for WPBakery plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53746](https://insights.sbomify.com/CVE-2024-53746/): WordPress Elementor Button Plus plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53745](https://insights.sbomify.com/CVE-2024-53745/): WordPress Social Sharing Buttons By Cosmos Farm plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53744](https://insights.sbomify.com/CVE-2024-53744/): WordPress Elementor Image Gallery plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53743](https://insights.sbomify.com/CVE-2024-53743/): WordPress Countdown Timer for Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53742](https://insights.sbomify.com/CVE-2024-53742/): Cross-site scripting in Multilevel Referral Affiliate Plugin for WooCommerce (high 7.1)
- [CVE-2024-53741](https://insights.sbomify.com/CVE-2024-53741/): WordPress Simple Popup plugin <= 4.6 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53740](https://insights.sbomify.com/CVE-2024-53740/): WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-5374](https://insights.sbomify.com/CVE-2024-5374/): Kashipara College Management System submit_new_faculty.php cross site scripting (medium 5.3)
- [CVE-2024-53739](https://insights.sbomify.com/CVE-2024-53739/): WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2024-53738](https://insights.sbomify.com/CVE-2024-53738/): WordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerability (medium 4.4)
- [CVE-2024-53737](https://insights.sbomify.com/CVE-2024-53737/): WordPress WP Mailster plugin <= 1.8.16.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53736](https://insights.sbomify.com/CVE-2024-53736/): WordPress Custom Shortcode Sidebars plugin <= 1.2 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53735](https://insights.sbomify.com/CVE-2024-53735/): WordPress iPhone Webclip Manager plugin <= 0.5 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53734](https://insights.sbomify.com/CVE-2024-53734/): WordPress Idealien Category Enhancements plugin <= 1.2 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53733](https://insights.sbomify.com/CVE-2024-53733/): WordPress Fence URL plugin <= 2.0.0 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53732](https://insights.sbomify.com/CVE-2024-53732/): WordPress Footer Flyout Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-53731](https://insights.sbomify.com/CVE-2024-53731/): WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53730](https://insights.sbomify.com/CVE-2024-53730/): WordPress April's Call Posts plugin <= 2.1.1 - CSRF to Stored XSS vulnerability (high 7.1)
- [CVE-2024-5373](https://insights.sbomify.com/CVE-2024-5373/): Kashipara College Management System submit_login.php cross site scripting (medium 5.3)
- [CVE-2024-53729](https://insights.sbomify.com/CVE-2024-53729/): WordPress Blizzard Quotes plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53728](https://insights.sbomify.com/CVE-2024-53728/): WordPress Protect Your Content plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53727](https://insights.sbomify.com/CVE-2024-53727/): WordPress LinkLaunder SEO plugin <= 0.92.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53726](https://insights.sbomify.com/CVE-2024-53726/): WordPress RealtyCandy IDX Broker Extended plugin <= 1.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53725](https://insights.sbomify.com/CVE-2024-53725/): WordPress Post Hits Counter plugin <= 2.8.23 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53724](https://insights.sbomify.com/CVE-2024-53724/): WordPress IceStats plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53723](https://insights.sbomify.com/CVE-2024-53723/): WordPress Google Plus Share and +1 Button plugin <= 1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53722](https://insights.sbomify.com/CVE-2024-53722/): WordPress Favicon My Blog plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-53721](https://insights.sbomify.com/CVE-2024-53721/): WordPress Advanced Event Manager plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-53720](https://insights.sbomify.com/CVE-2024-53720/): WordPress WP-ISPConfig 3 plugin <= 1.5.6 - CSRF to Stored XSS vulnerability (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/204/