CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- hookandhook coming soon & maintenance mode page & under construction, wpconcern nifty coming soon \& maintenance mode page +1 moreComing Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery8.8 High
- elementor pro, https://elementor.com/ elementor website builder pro +1 moreElementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option8.8 High
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Unauthenticated Post Meta Change5.8 Medium
- fruitfulcode fruitful, fruitful theme +1 moreFruitful < 3.8.2 - Stored Cross-Site Scripting6.4 Medium
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails7.2 High
- king-theme page builder king composer, kingthemes page builder: kingcomposer – free drag and drop page builder by king-theme +1 morePage Builder: KingComposer < 2.9.4 - Arbitrary File Upload8.8 High
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion6.5 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting6.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization5.5 Medium
- zorem advanced shipment tracking for woocommerceAdvanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change9.9 Critical
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes9.8 Critical
- coolplugins process steps template designerProcess Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery8.8 High
- createit ultimate gdpr \& ccpa compliance toolkit, createit-pl ultimate gdpr & ccpa compliance toolkit for wordpress +1 moreUltimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export7.5 High
- najeebmedia frontend file manager pluginFrontend File Manager <= 18.2 - Privilege Escalation6.4 Medium
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation9.8 Critical
- king-theme page builder kingcomposer, kingthemes page builder: kingcomposer – free drag and drop page builder by king-theme +1 morePage Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Control8.8 High
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX9.8 Critical
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated SQL Injection9.8 Critical
- anadnet quick page/post redirect plugin, quick page\/post redirect project page\/post redirect +1 moreQuick Page/Post Redirect Plugin <= 5.1.9 - Redirect Security Bypass4.3 Medium
- stylemixthemes ulisting, stylemix directory listings wordpress plugin – ulisting +1 moreuListing <= 1.6.6 - Unauthenticated Information Disclosure7.5 High
- duckdev 404 to 301, joelcj91 404 to 301 – redirect, log and notify 404 errors +1 more404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation6.4 Medium
- appsaloon wp gdprWP GDPR <= 2.1.1 - Missing Authorization Checks7.3 High
- tychesoftwares product input fields for woocommerceProduct Input Fields for WooCommerce <= 1.2.6 - Missing Authorization7.5 High
- mozilla firefoxMemory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of...9.8 Critical
- mozilla firefoxWhen choosing a site-isolated process for a document loaded from a data: URL that was the result...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Low
- renderdocRenderDoc through 1.26 allows local privilege escalation via a symlink attack.7.8 High
- renderdocRenderDoc through 1.26 allows an Integer Overflow with a resultant Buffer Overflow (issue 2 of 2).9.8 Critical
- renderdocRenderDoc through 1.26 allows an Integer Overflow with a resultant Buffer Overflow (issue 1 of 2).9.8 Critical
- dlink dir-842v2 firmwareD-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the...8.8 High
- dlink dir-842v2 firmwareAn issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing...8.8 High
- imperial cms project cmsImperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the...9.1 Critical
- phpokAn arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers...8.8 High
- pythonCPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function...5.5 Medium
- totolink a7100ru firmwareTOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- planet wdrt-1800ax firmwareAn issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication...9.8 Critical
- tp-link multiple routers, tl-wr740n firmware, tl-wr841n firmware +1 more +3 moreTP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a...8.8 High
- tp-link tl-wr740n firmware, tl-wr841n firmware, tl-wr940n firmware +2 moreTP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer...8.1 High
- tp-link tl-wr740n firmware, tl-wr841n firmware, tl-wr940n firmware +2 moreTP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer...8.1 High
- jeecg p3 biz chat project p3 biz chatJeecg P3 Biz Chat allows remote attackers to read arbitrary files7.5 High
- alistgo alistalist Incorrect Access Control vulnerability8.8 High
- xxl-rpc project xxl-rpcxxl-rpc deserialization vulnerability9.8 Critical
- marvalglobal msmMarval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote...8.8 High
- marvalglobal msmMarval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains...5.5 Medium
- marvalglobal msmMarval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote...9.8 Critical
- gnome glib, fedora extra packages for enterprise linux, fedora +9 more +11 moreGvariant deserialisation does not match spec for non-normal data5.5 Medium
- glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer...5.3 Medium
- glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of...4.7 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreG_variant_byteswap() can take a long time with some non-normal inputs5.5 Medium
- Show moreLoading…