CVEs published in August 2023
2,620 vulnerabilities, 342 critical, 13 exploited.
- rakib hasan dynamic qr code generatorWordPress Dynamic QR Code Generator Plugin <= 0.0.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- miled wordpress social loginWordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- poeditorPOEditor < 0.9.8 - Settings Reset via CSRF4.3 Medium
- mooveagency user activity tracking and logUser Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF4.3 Medium
- alexanderschneider user access managerUser Access Manager < 2.2.18 - IP Spoofing5.3 Medium
- riverforest-wp all users messengerAll Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR4.3 Medium
- aleksanaharonyan front editor, unknown guest posting / frontend posting wordpress plugin +1 moreFront Editor <= 4.0.4 - Admin+ Stored XSS4.8 Medium
- ninjaforms ninja forms contact formNinja Forms < 3.6.26 - Admin+ Stored HTML Injection4.8 Medium
- mooveagency gdpr cookie compliance, unknown gdpr cookie compliance (ccpa, dsgvo, cookie consent) +1 moreGDPR Cookie Compliance < 4.12.5 - License Update/Deactivation via CSRF6.5 Medium
- unknown postxPostX - Gutenberg Post Grid Blocks < 3.0.6 - Reflected Cross-Site Scripting6.1 Medium
- katsushi kawamori simple blog cardSimple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access4.3 Medium
- katsushi kawamori simple blog cardSimple Blog Card < 1.31 - Contributor+ Stored XSS via Shortcode5.4 Medium
- notetoservices upload media by urlUpload Media By URL < 1.0.8 - Stored XSS via CSRF6.5 Medium
- formcrafts formcraftFormCraft < 1.2.7 - Admin+ Stored XSS4.8 Medium
- kreci subscribers text counterSubscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS4.3 Medium
- casier bbpress toolkitWordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Scripting (XSS)7.1 High
- miled wordpress social loginWordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alexander semikashev yandex metrica counter, yandex metrica counter project metric counter +1 moreWordPress Yandex Metrica Counter Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
kimageformatsOSS-FuzzIndex-out-of-bounds in derive_spatial_luma_vector_predictionNo scorefrrOSS-FuzzHeap-buffer-overflow in pim_pim_packetNo score- bbs e-theme e-popup, bbsetheme bbs e-popup +1 moreWordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- kaplugins google fonts for wordpress, free-google-fonts +1 moreWordPress Google Fonts For WordPress Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- grandslambert login configurator, login configurator project configurator +1 moreWordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- chilexpress woo oficial, chilexpress-oficial +1 moreWordPress Chilexpress woo oficial Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- bhavik patel woocommerce order address print, bhavikpatel woocommerce-order-address-print +1 moreWordPress Woocommerce Order address Print Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- unitegallery unite gallery liteWordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alan tien call now icon animateWordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- notifyvisitorsWordPress NotifyVisitors Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- joaquín ruiz easy admin menuWordPress Easy Admin Menu Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mohammad i. okfie wp-hijriWordPress WP-Hijri Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- te-st leykaWordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- woocommerce returns and warranty requestsWordPress WooCommerce Warranty Requests Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- nuajik, nuajik nuajik-cdn +1 moreWordPress nuajik CDN Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wp htaccess controlWordPress WP htaccess Control Plugin <= 3.5.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- cookie monster project monster, gsmith cookie monster +1 moreWordPress Cookie Monster Plugin <= 1.51 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 moreServer-Side Request Forgery (SSRF) in bookstackapp/bookstack2.4 Low
- hastheme wishsuite – wishlist for woocommerce, hasthemes wishsuite +1 moreWordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- premio chatyWordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- i thirteen web solution video galleryWordPress Video Gallery Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)7.1 High
- woocommerce brandsWordPress WooCommerce Brands Plugin <= 1.6.45 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- unknown woocommerce pre-orders, woocommerce pre-orders +1 moreWordPress WooCommerce Pre-Orders Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- unknown woocommerce pre-orders, woocommerce pre-orders +1 moreWordPress WooCommerce Pre-Orders Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- affiliatewpThe AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing...4.3 Medium
- woocommerce composite productsWordPress WooCommerce Composite Products Plugin <= 8.7.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- veronalabs wp smsWordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- kunal nagar custom 404 proWordPress Custom 404 Pro Plugin <= 3.8.1 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
openjdk-17Ubuntu,openjdk-ltsUbuntu +1 moreopenjdk-lts, openjdk-17 regressionNo score- perfopsone mailarchiverMailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject7.2 High
- gitlabImproper Validation of Specified Type of Input in GitLab4.3 Medium
- wp-webhooks email encoder, onlineoptimisation email encoder – protect email addresses and phone numbers +1 moreEmail Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- Show moreLoading…