CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- unknown popular brand icons – simple icons, thememason popular brand icons - simple icons +1 morePopular Brand SVG Icons - Simple Icons < 2.7.8 - Contributor+ Stored XSS5.4 Medium
- dwbooster calendar event multi viewCalendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)6.1 Medium
- community events project events, jackdewey community events +1 moreCommunity Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- unknown handsome testimonials & reviews, handsome testimonials \& reviews project testimonials \& reviews +1 moreHandsome Testimonials & Reviews < 2.1.1 - Authenticated (Subscriber+) SQL Injection8.8 High
- pickplugins post gridPost Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- ays pro secure copy content protection and content lockingSecure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections7.2 High
- ays pro poll makerPoll Maker < 3.2.1 - Authenticated Blind SQL Injections7.2 High
- any hostname project hostname, unknown any hostname +1 moreAny Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- event geek project geek, unknown event geek +1 moreEvent Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)4.8 Medium
- drawblog project drawblogDrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- bookshelf project bookshelfBookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- migrate users project users, unknown migrate users +1 moreMigrate Users <= 1.0.1 - CSRF to Stored Cross-Site Scripting (XSS)6.1 Medium
- steam group viewer project group viewer, unknown steam group viewer +1 moreSteam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- awesome weather widget project weather widget, richardgabriel awesome weather widget +1 moreAwesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)6.1 Medium
- cozmoslabs user profile pictureUser Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR5.4 Medium
- qantumthemes kentharadio, onair2, qt kentharadio +2 moreOnair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF9.8 Critical
- dmccan yada wiki, yada wiki project wiki +1 moreYada Wiki < 3.4.1 - Contributor+ Stored XSS5.4 Medium
- bozdoz leaflet mapLeaflet Map < 3.0.0 - Contributor+ Stored XSS5.4 Medium
- unknown youtube embed, playlist and popup by wpdevart, wpdevart youtube embed\, playlist and popup +1 moreYouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSS5.4 Medium
- ays pro image slider by ays- responsive slider and carousel, ays-pro image slider +1 moreImage Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection8.8 High
- ays pro photo gallery by ays – responsive image gallery, ays-pro photo gallery +1 morePhoto Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections8.8 High
- ays pro faq builder ays, ays-pro faq builder +1 moreFAQ Builder < 1.3.6 - Authenticated Blind SQL Injections8.8 High
- ays pro popup like box – page plugin, ays-pro popup box +1 morePopup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections8.8 High
- ays pro survey makerSurvey Maker < 1.5.6 - Authenticated Blind SQL Injections8.8 High
- ays pro popup boxPopup box < 2.3.4 - Authenticated Blind SQL Injections8.8 High
- ays pro portfolio responsive galleryPortfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections8.8 High
- ays pro quiz makerQuiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections7.2 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- properfraction profilepress, unknown user registration, user profiles, login & membership – profilepress (formerly wp user avatar) +1 moreProfilePress < 3.1.8 - Authenticated Stored XSS4.8 Medium
- cozmoslabs profile builder, unknown user registration & user profile – profile builder +1 moreProfile Builder < 3.4.8 - Authenticated Stored XSS4.8 Medium
- kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreYouzify < 1.0.7 - Stored Cross-Site Scripting via Biography5.4 Medium
- optimocha speed booster pack, unknown speed booster pack ⚡ pagespeed optimization suite +1 moreSpeed Booster Pack 4.2.0-beta - Authenticated (admin+) RCE7.2 High
- unknown rss for yandex turbo, yandex turbo +1 moreRSS for Yandex Turbo <= 1.30 - Authenticated Stored XSS4.8 Medium
- premio mystickymenu, unknown floating notification bar, sticky menu on scroll, and sticky header for any theme – mystickymenu +1 moremyStickymenu < 2.5.2 - Authenticated Stored XSS4.8 Medium
- carrcommunications rsvpmakerRSVPMaker < 8.7.3 - Authenticated (admin+) SSRF2.7 Low
- mb connect line mbconnect24, mymbconnect24 +1 moreInformation Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.07.5 High
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 morePassword policy evasion in products of MB connect line and Helmholz4.3 Medium
- mb connect line mbdialupOS Command Injection in mbDIALUP <= 3.9R0.09.8 Critical
- mb connect line mbdialupPrivilege escalation in mbDIALUP <= 3.9R0.07.8 High
- openplcproject openplcOpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's...5.4 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...5.5 Medium
- atlassian data center, jira, jira data center +1 more +3 moreThe DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1...8.8 High
libredwgOSS-FuzzHeap-buffer-overflow in dwg_convert_SAB_to_SAT1No scoretidy-html5OSS-FuzzStack-buffer-overflow in strcatNo score- taxopress, unknown taxopress – create and manage taxonomies, tags, categories +1 moreTaxoPress < 3.0.7.2 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
fluent-bitOSS-FuzzHeap-buffer-overflow in flb_hash_get_by_idNo scoredracoOSS-FuzzUNKNOWN READ in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::cNo scoreghostscriptOSS-FuzzHeap-use-after-free in gx_pattern_accum_finalize_cwNo scoreserenityOSS-FuzzUse-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtrNo score- Show moreLoading…