CVEs published in June 2023
2,445 vulnerabilities, 292 critical, 16 exploited.
- advantech r-seenetAdvantech R-SeeNet Use of Hard-coded Credentials9.8 Critical
- advantech r-seenetAdvantech R-SeeNet External Control of File Name or Path8.8 High
- wp overnight quick/bulk order form for woocommerce, wpovernight download quick\/bulk order form for woocommerce +1 moreWordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and manager professional +1 moreWordPress WOLF Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
fileOSS-FuzzUNKNOWN WRITE in regcompNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_lineNo score- marco milesi telegram bot & channel, telegram bot \& channel project bot \& channel +1 moreWordPress Telegram Bot & Channel Plugin <= 3.6.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- bbp style pack project style pack, robin wilson bbp style pack +1 moreWordPress bbp style pack Plugin <= 5.5.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- unknown updraftplus wordpress backup plugin, updraftplus +1 moreWordPress UpdraftPlus Plugin <= 1.23.3 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- vaadin, flow flow-server +1 moreVaadin vulnerable to possible information disclosure of class and method names in RPC response3.5 Low
- vaadin, flow flow-server +1 morePossible information disclosure in non visible components5.7 Medium
- rapidload power-up for autoptimizeWordPress RapidLoad Power-Up for Autoptimize Plugin <= 1.6.35 is vulnerable to SQL Injection8.5 High
- grade review streamWordPress Review Stream Plugin <= 1.6.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- kanban for wordpress boards for wordpress, kanbanwp kanban boards +1 moreWordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- repute infosystems armemberWordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- xtemos woodmart, woodmart theme +1 moreWordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- mediciti lite project lite, yudlee themes mediciti lite +1 moreWordPress Mediciti Lite Theme <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of...5.9 Medium
- elightup erocketWordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wow-company button generator – easily button builder, wow-estore button generator - easily button builder +1 moreWordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains a memory corruption vulnerability in the implementation of the...8.1 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of...8.1 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreThe VMware vCenter Server contains a use-after-free vulnerability in the implementation of the...8.1 High
- onewebsite wp repostWordPress WP Repost Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- advanced text widget project text widget, max chirkov advanced text widget +1 moreWordPress Advanced Text Widget Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- woocommerce paypal paymentsWordPress WooCommerce PayPal Payments Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- woocommerce bulk stock managementWordPress WooCommerce Bulk Stock Management Plugin <= 2.2.33 is vulnerable to Cross Site Scripting (XSS)7.1 High
- vmware vcenter server, cloud foundation (vcenter server), vcenter server (vcenter server) +2 moreVMware vCenter Server heap-overflow vulnerability8.1 High
- wpforms, wpforms lite, pro +1 more +3 moreWordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability5.8 Medium
- neil gee smoothscrollerWordPress Smoothscroller Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- muneeb form builderWordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- qumos mojoplug slide panelWordPress MojoPlug Slide Panel Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- bestwebsoft paginationWordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution continuous image carousel with lightboxWordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)7.1 High
- albo pretorio on line project pretorio on line, ignazio scimone albo pretorio on line +1 moreWordPress Albo Pretorio Online Plugin <= 4.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- contest gallery gallery, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreWordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control6.5 Medium
- debian linux, openprinting cups, apple macos +1 more +3 moreCUPS vulnerable to use-after-free in cupsdAcceptClient()5.3 Medium
- stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 moreWordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wpbakery page builderWordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- drew phillips vigilantorWordPress VigilanTor Plugin <= 1.3.10 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- agile logix store locator wordpress, agilelogix store locator +1 moreWordPress Store Locator WordPress Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wp job portal – a complete job board, wpjobportal wp job portal +1 moreWordPress WP Job Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- smtp2go, smtp2go – email made easy +1 moreWordPress SMTP2GO Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- prism tech studios modern footnotesWordPress Modern Footnotes Plugin <= 1.4.15 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- aakif kadiwala tags cloud manager, tags cloud manager project cloud manager +1 moreWordPress Tags Cloud Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wp chill brillianceWordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- geminilabs site reviewsWordPress Site Reviews Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- geminilabs site reviewsWordPress Site Reviews Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- shazzad hossain khan w4 post list, w4 post list project post list +1 moreWordPress W4 Post List Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…