CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- delta electronics infrasuite device masterDelta Electronics InfraSuite Device Master Deserialization of Untrusted Data9.8 Critical
- best fee management system project fee management system, sourcecodester best fee management system +1 moreSourceCodester Best Fee Management System Add User admin_class.php save_user access control6.3 Medium
tzdataTuxCareUpdate of alt-phpNo score- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.c7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.c6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.c6.2 Medium
- anakeen dynacase webdesk, dynacase webdesk +1 moreDynacase Webdesk freedomrss_search.php freedomrss_search sql injection5.5 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is vulnerable to sensitive information disclosure5.1 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API9.7 Critical
- deepak anand wp dummy content generator, wp dummy content generator project dummy content generator +1 moreWordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- wp zone potent donations for woocommerceWordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- albert peschar webwinkelkeurWordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- premmerce redirect managerWordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- configurable tag cloud project tag cloud, keith solomon configurable tag cloud (ctc) +1 moreWordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- lionscripts ip blocker lite, lionscripts.com lionscripts: ip blocker lite +1 moreWordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- mra13 affiliates managerWordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
serenityOSS-FuzzHeap-buffer-overflow in Gfx::InputStreamer::read_u24No scoreharfbuzzOSS-FuzzHeap-buffer-overflow in OT::CmapSubtable::get_glyphNo scoreharfbuzzOSS-FuzzHeap-buffer-overflow in OT::CmapSubtable::collect_unicodesNo score- beelikedBeeliked Microsite Plugin beelikedmicrosite.php embed_handler cross site scripting3.5 Low
- carrcommunications rsvpmakerWordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection7.6 High
- wedevs happy addons for elementorWordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- jason rouet weather station, weather station project station +1 moreWordPress Weather Station Plugin <= 3.8.12 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- riverside http headersHTTP Headers < 1.18.11 - Admin+ Remote Code Execution7.2 High
- ashanjay eventonEventON < 2.1.2 - Unauthenticated Post Access via IDOR5.3 Medium
- inspireui mstore api, mstore api +1 moreMStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update4.3 Medium
- unknown float menuFloat menu < 5.0.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- tinymce custom styles project custom styles, unknown tinymce custom styles +1 moreTinyMCE Custom Styles < 1.1.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- stpetedesign call now accessibility buttonCall Now Accessibility Button < 1.1 - Admin+ Stored XSS4.8 Medium
- inspireui mstore api, mstore api +1 moreMStore API < 3.9.7 - Settings Update via CSRF3.5 Low
- enzipe prepost seoPrePost SEO <= 3.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- stpetedesign call now accessibility buttonCall Now Accessibility Button < 1.1 - Admin+ Stored Cross Site Scripting4.8 Medium
- quantumcloud ai chatbot, wpbot +1 moreAI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- an gradebook project gradebook, unknown an gradebook +1 moreAN_GradeBook <= 5.0.1 - Admin+ XSS4.8 Medium
- atlasgondal export all urlsExport All URLs < 4.6 - Reflected XSS6.1 Medium
- enable svg uploads project svg uploads, unknown enable svg uploads +1 moreEnable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG5.4 Medium
- tagdiv cloud library, unknown tagdiv cloud library +1 moretagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation8.8 High
- greeklish-permalink project greeklish-permalinkGreeklish-permalink < 3.5 - Unauthenticated Post Slug Update4.3 Medium
- codeermeneer companion sitemap generatorCompanion Sitemap Generator < 4.5.3 - Reflected XSS6.1 Medium
- simple iframe project iframe, unknown simple iframe +1 moreSimple Iframe < 1.2.0 - Contributor+ Stored XSS5.4 Medium
- image protector project protector, unknown image protector +1 moreImage Protector <= 1.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- oblak studio srbtranslatin, unknown wp-optimize +1 moreMultiple Plugins - Cross-Site Scripting From Third-party Library6.1 Medium
- inspireui mstore api, mstore api +1 moreMStore API < 3.9.8 - Unauthenticated Blind SQLi9.8 Critical
- inspireui mstore api, mstore api +1 moreMStore API < 3.9.9 - Unauthenticated Privilege Escalation9.8 Critical
- buymeacoffee buy me a coffeeBuy Me a Coffee < 3.7 - Admin+ Stored XSS4.8 Medium
- unknown all in one redirectionAll In One Redirection < 2.2.0 - Admin+ SQLi7.2 High
- ashanjay eventonEventON < 2.1.2 - Unauthenticated Event Access5.3 Medium
- kaizencoders url shortifyURL Shortify < 1.7.0 - Admin+ Cross Site Scripting4.8 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- arian khosravi, norik davtian bigcontact contact page, bigcontact contact page project contact page +1 moreWordPress BigContact Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- Show moreLoading…