CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- numixtech sticky popup, sticky popup project popup +1 moreSticky Popup <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting5.5 Medium
- artbees jupiterx, jupiter x core +1 moreJupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service5.4 Medium
- artbees jupiter, jupiterx, jupiter x core +2 moreJupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation8.8 High
- script mobile browser color selectMobile browser color select <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- artbees jupiterJupiter Theme <= 6.10.1 - Authenticated Arbitrary Plugin Deletion5.4 Medium
- createplugin wpmk ajax finder, wpmk ajax finder project ajax finder +1 moreWPMK Ajax Finder <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- gtm4wp google tag manager, duracelltomi gtm4wp – a google tag manager (gtm) plugin for wordpress +1 moreGoogle Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID5.5 Medium
- unknown mitsol social post feed, facebook-wall-and-social-integration project facebook-wall-and-social-integration +1 moreMitsol Social Post Feed < 1.11 - Admin+ Stored Cross-Site Scripting4.8 Medium
- androidbubbles keep backup dailyKeep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting6.1 Medium
- carrcommunications rsvpmakerRSVPMaker <= 9.3.2 - Unauthenticated SQL Injection9.8 Critical
- artbees jupiter, jupiterx, jupiter x +2 moreJupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion8.8 High
- helpdeskzA cross-site scripting (XSS) vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2...4.8 Medium
- helpdeskzA cross-site scripting (XSS) vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2...4.8 Medium
- copifyCopify <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- miguelo2008 toolbar to share, toolbar to share project to share +1 moreToolBar to Share <= 2.0 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- gtm4wp google tag manager, duracelltomi gtm4wp – a google tag manager (gtm) plugin for wordpress +1 moreGoogle Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search6.1 Medium
- codename065 download managerDownload Manager <= 3.2.42 - Reflected Cross-Site Scripting6.1 Medium
- ultimatemember ultimate member, ultimate member – user profile, registration, login, member directory, content restriction & membership plugin +1 moreUltimate Member <= 2.3.2 - Stored Cross-Site Scripting6.4 Medium
- unknown wp admin style, wp admin style project admin style +1 moreWP Admin Style <= 0.1.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown export any wordpress data to xml/csv, soflyy export any wordpress data to xml\/csv +1 moreExport any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection7.2 High
- private files project files, unknown private files +1 morePrivate Files <= 0.40 - Protection Disabling via CSRF4.3 Medium
- quick subscribe project subscribe, unknown quick subscribe +1 moreQuick Subscribe <= 1.7.1 - Arbitrary Settings Update via CSRF to Stored XSS5.4 Medium
- one click plugin updater project click plugin updater, unknown one click plugin updater +1 moreOne Click Plugin Updater <= 2.4.14 - Arbitrary Settings Update via CSRF8.1 High
- new user email set up project user email set up, unknown new user email set up +1 moreNew User Email Set Up <= 0.5.2 - Arbitrary Settings Update via CSRF6.5 Medium
- change uploaded file permissions project uploaded file permissions, unknown change uploaded file permissions +1 moreChange Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF6.5 Medium
- sideblog project sideblog, unknown sideblog wordpress plugin +1 moreSideblog <= 6.0 - Arbitrary Settings Update via CSRF to Stored XSS5.4 Medium
- posttabs project posttabspostTabs <= 2.10.6 - Arbitrary Settings Update via CSRF to Stored XSS5.4 Medium
- latex project latex, unknown latex for wordpress +1 moreLaTeX for WordPress <= 3.4.10 - Arbitrary Settings Update via CSRF to Stored XSS5.4 Medium
- auto delete posts project delete posts, unknown auto delete posts +1 moreAuto Delete Posts <= 1.3.0 - Arbitrary Settings Update via CSRF8.1 High
- filr project filr, unknown filr – secure document library +1 moreFilr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX Calls8.8 High
- unknown wp athletics, wp athletics project athletics +1 moreWP Athletics <= 1.1.7 - Reflected Cross-Site Scripting6.1 Medium
- google places reviews project places reviews, unknown google places reviews +1 moreGoogle Places Review < 2.0.0 - Admin+ Stored Cross Site Scripting4.8 Medium
- hot linked image cacher project linked image cacher, unknown hot linked image cacher +1 moreHot Linked Image Cacher <= 1.16 - Image upload/cache abuse via CSRF8.8 High
- unknown wp-chgfontsizeWP-chgFontSize <= 1.8 - Arbitrary Settings Update via CSRF to Stored XSS5.4 Medium
- static page extended project page extended, unknown static page extended +1 moreStatic Page eXtended <= 2.1 - Arbitrary Settings Update via CSRF to Stored XSS5.4 Medium
- unknown iq block countryiQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing7.5 High
- peter\'s collaboration e-mails project collaboration e-mails, unknown peter’s collaboration e-mails +1 morePeter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF6.5 Medium
- rb internal links project internal links, unknown rb internal links +1 moreRB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF5.4 Medium
- genki pre-publish reminder project pre-publish reminder, unknown genki pre-publish reminder +1 moreGenki Pre-Publish Reminder <= 1.4.1 - Stored XSS & RCE via CSRF8.8 High
- thenewsletterplugin newsletter, satollo newsletter – send awesome emails from wordpress +1 moreNewsletter < 7.4.5 - Reflected Cross-Site Scripting6.1 Medium
- simple-membership-plugin simple membershipSimple Membership < 4.1.1 - Reflected Cross-Site Scripting6.1 Medium
- dwbooster appointment hour booking, unknown appointment hour booking – wordpress booking plugin +1 moreAppointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown useful banner manager, useful banner manager project banner manager +1 moreUseful Banner Manager <= 1.6.1 - Modify banners via CSRF6.5 Medium
- latest tweets widget project tweets widget, unknown latest tweets widget +1 moreLatest Tweets Widget <= 1.1.4 - Arbitrary Settings Update via CSRF6.5 Medium
- unknown webriti smtp mail, webriti smtp mail +1 moreWebriti SMTP Mail <= 1.0 - Arbitrary Settings Update via CSRF6.5 Medium
- byonepress social locker, unknown onepress social locker +1 moreOnePress Social Locker <= 5.6.2 - Arbitrary Settings Update via CSRF6.5 Medium
- email users project users, unknown email users +1 moreEmail Users <= 4.8.8 - Arbitrary Settings Update via CSRF6.5 Medium
- mailerlite – signup forms (official), signup forms, unknown mailerlite – signup forms (official) +2 moreMailerLite < 1.5.4 - Reflected Cross-Site Scripting6.1 Medium
- hc custom wp-admin url project custom wp-admin url, unknown hc custom wp-admin url +1 moreHC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure5.3 Medium
- hc custom wp-admin url project custom wp-admin url, unknown hc custom wp-admin url +1 moreHC Custom WP-Admin URL <= 1.4 - Arbitrary Settings Update via CSRF4.3 Medium
- Show moreLoading…