CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- rocket apps open graphiteWordPress Open Graphite Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- branko borilovic wsb brands, wsb brands project brands +1 moreWordPress WSB Brands Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- arubanetworks arubaos, hp instantos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10 +2 moreAruba InstantOS and ArubaOS 10 Sensitive Information Disclosure5.4 Medium
- arubanetworks arubaos, hp instantos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10 +2 moreAuthenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface7.2 High
- arubanetworks arubaos, hp instantos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10 +2 moreAuthenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface7.2 High
- arubanetworks arubaos, hp instantos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10 +2 moreAuthenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface7.2 High
- arubanetworks arubaos, hp instantos, hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10 +2 moreUnauthenticated Denial of Service (DoS) in Aruba InstantOS or ArubaOS 10 Service Accessed via the PAPI Protocol7.5 High
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) aruba access points running instantos and arubaos 10, hp arubaos, instantos +2 moreUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol9.8 Critical
wabtOSS-FuzzUse-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExprNo scorehdf5OSS-FuzzUNKNOWN READ in H5FL__blk_gc_listNo score- topdigitaltrends mega addons for wpbakery page builderMega Addons For WPBakery Page Builder < 4.3.0 - Contributor+ Stored XSS5.4 Medium
- post shortcode project shortcode, unknown post shortcode +1 morePost Shortcode <= 2.0.9 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- sloth logo customizer project logo customizer, unknown sloth logo customizer +1 moreSloth Logo Customizer <= 2.0.2 - Stored XSS via CSRF8.8 High
- shapedplugin product slider for woocommerce, unknown product slider for woocommerce lite +1 moreProduct Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS5.4 Medium
- thanhtungtnt video list manager, video list manager project list manager +1 moreVideo List Manager <= 1.7 - Admin+ SQL Injection7.2 High
- unknown bitcoin / altcoin payment gateway for woocommerce & multivendor store / shop, coinmarketstats bitcoin \/ altcoin payment gateway for woocommerce +1 moreBitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi9.8 Critical
- unknown customizer export/import, fastlinemedia customizer export\/import +1 moreCustomizer Export/Import < 0.9.6 - Admin+ PHP Object Injection7.2 High
- topdigitaltrends ultimate carousel for elementorUltimate Carousel For Elementor <= 2.1.7 - Contributor+ Stored XSS5.4 Medium
- unknown wp-d3Wp-D3 <= 2.4.1 - Contributor+ Stored XSS5.4 Medium
- quantumcloud ai chatbot, wpbot +1 moreChatBot < 4.5.1 - Admin+ Stored XSS4.8 Medium
- unknown wp inventory manager, wp inventory manager +1 moreWP Inventory Manager < 2.1.0.12 - Reflected XSS6.1 Medium
- quantumcloud ai chatbot, wpbot +1 moreChatBot < 4.4.7 - Unauthenticated PHP Object Injection9.8 Critical
- blackbirdi custom post type list shortcodeCustom Post Type List Shortcode <= 1.4.4 - Contributor+ Stored XSS5.4 Medium
- membership database project database, unknown membership database +1 moreMembership Database <= 1.0 - Reflected XSS6.1 Medium
- quantumcloud ai chatbot, wpbot +1 moreChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS5.4 Medium
- basix nex-formsNEX-Forms < 8.4 - Admin+ SQL Injection7.2 High
- enable\/disable auto login when register project auto login when register, unknown enable/disable auto login when register +1 moreEnable/Disable Auto Login when Register <= 1.1.0 - Settings Update via CSRF6.5 Medium
- quantumcloud ai chatbot, wpbot +1 moreChatBot < 4.4.5 - Stored XSS via CSRF6.1 Medium
- unknown wp login box, wp login box project login box +1 moreWP Login Box <= 2.0.2 - Admin+ Stored XSS4.8 Medium
- quantumcloud ai chatbot, wpbot +1 moreChatBot < 4.4.9 - Unauthenticated Stored XSS6.1 Medium
- cloud manager project manager, unknown cloud manager +1 moreCloud Manager <= 1.0 - Reflected XSS6.1 Medium
- artisanworkshop japanized for woocommerceJapanized For WooCommerce < 2.5.8 - Reflected XSS6.1 Medium
- avirato hotels online booking engine, unknown avirato hotels online booking engine +1 moreAvirato hotels online booking engine <= 5.0.5 - Subscriber+ SQLi8.8 High
- topdigitaltrends ultimate carousel for wpbakery page builderUltimate Carousel For WPBakery Page Builder <= 2.6 - Contributor+ Stored XSS5.4 Medium
- unknown pickup | delivery | dine-in date time, byconsole pickup \| delivery \| dine-in date time +1 morePickup | Delivery | Dine-in date time <= 1.0.9 - Admin+ Stored XSS4.8 Medium
- damian wp popupsWP Popups < 2.1.5.1 - Contributor+ Stored XSS5.4 Medium
- te-st yandex.news feed by teplitsaWordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- advantech eki-1521, eki-1522, eki-1524 +3 more +5 moreAuthenticated Command Injection8.8 High
- advantech eki-1521, eki-1522, eki-1524 +3 more +5 moreAuthenticated Command Injection8.8 High
- corefortress easy event calendar, easy event calendar project event calendar +1 moreWordPress Easy Event calendar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- cms press project press, michael pretty (prettyboymp) cms press +1 moreWordPress CMS Press Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- advantech eki-1521, eki-1522, eki-1524 +3 more +5 moreAuthenticated Buffer Overflow8.8 High
- exxp project exxpWordPress Exxp Plugin <= 2.6.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…