CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- ionicabizau ionicabizau/parse-url, parse-url project parse-url +1 moreExposure of Sensitive Information to an Unauthorized Actor in ionicabizau/parse-url4.8 Medium
- scaffold-helper project scaffold-helperA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1...7.5 High
- ionicabizau ionicabizau/parse-url, parse-url project parse-url +1 moreCross-site Scripting (XSS) - Generic in ionicabizau/parse-url9.1 Critical
- split-html-to-chars project split-html-to-charsA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to...7.5 High
- that-value project that-valueA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3...7.5 High
- todo-regex project todo-regexA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1...7.5 High
- brizy, themefusecom brizy – page builder +1 moreBrizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element Content5.4 Medium
- brizy, themefusecom brizy – page builder +1 moreBrizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URL5.4 Medium
- miniorange malware scannerminiOrange's Malware Scanner < 4.5.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown login with otp over sms, email, whatsapp and google authenticator, miniorange login with otp over sms\, email\, whatsapp and google authenticator +1 moreGoogle Authenticator < 1.0.8 - Admin+ Stored Cross-Site Scripting4.8 Medium
- kylephillips nested pagesNested Pages < 3.1.21 - Admin+ Stored Cross Site Scripting4.8 Medium
- unknown import export all wordpress images, users & post types, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 moreWP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRF7.2 High
- wpgetready nextcellent gallery, unknown nextcellent gallery – nextgen legacy +1 moreNextCellent Gallery <= 1.9.35 - Admin+ Stored XSS4.8 Medium
- easy svg support project svg support, unknown easy svg support +1 moreEasy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG5.4 Medium
- mycss project mycssMyCSS <= 1.1 - Arbitrary Settings Update via CSRF4.3 Medium
- mklacroix product configurator for woocommerce, product configurator for woocommerce project configurator for woocommerce +1 moreProduct Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion9.1 Critical
- realmag777 active products tables for woocommerce. professional products tables for woocommerce store, pluginus woot +1 moreActive Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting6.1 Medium
- clean-contact project clean-contactClean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF4.3 Medium
- add post url project post url, unknown add post url +1 moreAdd Post URL <= 2.1.0 - Arbitrary Settings Update to Stored XSS via CSRF4.3 Medium
- fatcatapps easy pricing tables, unknown pricing tables wordpress plugin – easy pricing tables +1 moreEasy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting6.1 Medium
- armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 moreARMember < 3.4.8 - Unauthenticated Admin Account Takeover8.1 High
- cimy header image rotator project header image rotator, unknown cimy header image rotator +1 moreCimy Header Image Rotator <= 6.1.1 - Arbitrary Settings Update via CSRF4.3 Medium
- rotating posts project posts, unknown rotating posts +1 moreRotating Posts <= 1.11 - Arbitrary Settings Update to Stored XSS via CSRF4.3 Medium
- tiny contact form project contact form, unknown tiny contact form +1 moreTiny Contact Form <= 0.7 - Arbitrary Settings Update via CSRF4.3 Medium
- unknown wp post styling, wp post styling project post styling +1 moreWP Post Styling < 1.3.1 - Multiple CSRF4.3 Medium
- unknown wp sentry, wp-sentry project wp-sentry +1 moreWP Sentry <= 1.0 - Arbitrary Settings Update to Stored XSS via CSRF4.3 Medium
- mailpress project mailpressMailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRF6.5 Medium
- openbook book data project book data, unknown openbook book data +1 moreOpenBook Book Data <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRF4.3 Medium
- icegram popups\, welcome bar\, optins and lead generation plugin, unknown popups, welcome bar, optins and lead generation plugin – icegram +1 moreIcegram < 2.1.8 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- supsystic social share buttons, unknown social share buttons by supsystic +1 moreSocial Share Buttons by Supsystic < 2.2.4 - Multiple CSRF4.3 Medium
- unknown my private siteMy Private Site < 3.0.8 - Arbitrary Settings Update via CSRF4.3 Medium
- saad iqbal new user approveNew User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF4.3 Medium
- site offline or coming soon project offline or coming soon, unknown site offline or coming soon +1 moreSite Offline or Coming Soon <= 1.6.6 - Stored Cross-Site Scripting via CSRF6.1 Medium
- html2wp project html2wpHTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload9.8 Critical
- html2wp project html2wpHTML2WP <= 1.0.0 - Arbitrary Settings Update via CSRF4.3 Medium
- html2wp project html2wpHTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion8.1 High
- ultimate woocommerce csv importer project woocommerce csv importer, unknown ultimate woocommerce csv importer +1 moreUltimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting6.1 Medium
- rich-web image gallery, unknown image gallery – grid gallery +1 moreImage Gallery - Grid Gallery < 1.1.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- form - contact form project - contact form, unknown form – contact form +1 moreForm - Contact Form <= 1.2.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- miniorange google authenticator, unknown miniorange's google authenticator – wordpress two factor authentication (2fa , two factor, otp sms and email) | passwordless login +1 moreminiOrange's Google Authenticator < 5.5.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- floristone flower delivery, unknown flower delivery by florist one +1 moreFlower Delivery by Florist One <= 3.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mihdan mihdan: no external links, mihdan\ no external links project +1 moreMihdan: No External Links < 5.0.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- automattic limit login attemptsLimit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site Scripting4.8 Medium
- miniorange wordpress security, unknown wordpress security – firewall, malware scanner, secure login and backup +1 moreWordPress Security < 4.2.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- miniorange login using wordpress users, unknown login using wordpress users ( wp as saml idp ) +1 moreLogin using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- miniorange google authenticatorminiOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site Scripting4.3 Medium
- unknown backup, restore and migrate wordpress sites with the xcloner plugin, watchful xcloner +1 moreXCloner < 4.3.6 - Plugin Settings Reset4.3 Medium
- library management system project management system, owthub library management system +1 moreSourceCodester Library Management System bookdetails.php sql injection6.3 Medium
- library management system project management system, owthub library management system +1 moreSourceCodester Library Management System cross site scripting3.5 Low
- library management system project management system, owthub library management system +1 moreSourceCodester Library Management System /card/index.php unrestricted upload6.3 Medium
- Show moreLoading…