CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- mikkotommila apfloatApfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat...7.5 High
- apfloatApfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org...7.5 High
- No product listedThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org...No score
- threeten backportThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org...3.3 Low
- No product listedJGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org...6.2 Medium
- jgrapht coreJGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org...9.1 Critical
- jfree jfreechartJFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart...9.1 Critical
- abrhil employees portal, lista de asistencia +1 moreAbrhilSoft Employee's Portal before v5.6.2 was discovered to contain a SQL injection...9.1 Critical
- fast5 prison management systemSourceCodester Prison Management System Avatar edit-photo.php unrestricted upload6.3 Medium
- cp plus wi-fi cameraCP Plus Wi-Fi Camera User Management improper authorization5.4 Medium
- puneethreddyhc event managementPuneethReddyHC Event Management register.php cross site scripting3.5 Low
- puneethreddyhc event managementPuneethReddyHC Event Management register.php sql injection5.5 Medium
- eyoucmsEyouCMS Backend deserialization4.7 Medium
- No product listedQKSMS Backup File androidmanifest.xml backup2.4 Low
- metagauss profilegridWordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerability4.3 Medium
- repute infosystems bookingpressWordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- sizam rehubWordPress Rehub theme <= 19.6.1 - Auth. SQL Injection vulnerability8.5 High
- sizam rehub frameworkWordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability8.5 High
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import plugin <= 4.0.3 - Auth. SQL Injection vulnerability7.6 High
- wisdmlabs edwiser bridgeWordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability7.6 High
- automattic woocommerceWordPress WooCommerce plugin <= 8.5.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- royal-elementor-addons royal elementor addonsWordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- elextensions elex woocommerce dynamic pricing and discountsWordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- webinarpressWordPress WebinarPress plugin <= 1.33.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- formsite | embed online forms to collect orders, registrations, leads, and surveysWordPress Formsite plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- micro.company form to chat appWordPress Form to Chat App plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpdeveloper essential blocks for gutenberg, essential blocks +1 moreWordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- phpbits creative studio easy login styler – white label admin login page for wordpressWordPress Easy Login Styler plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- blocksmarket gradient text widget for elementorWordPress Gradient Text Widget for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themepoints testimonialsWordPress Super Testimonials plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mailmunch, mailmunch – grow your email list +1 moreWordPress MailMunch – Grow your Email List plugin <= 3.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability9.9 Critical
- argie online coursewareSourceCodester Online Courseware edit.php cross site scripting3.5 Low
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability9.9 Critical
- moove agency import xml and rss feeds, wordpress import xml and rss feeds plugin +1 moreWordPress Import XML and RSS Feeds plugin <= 2.1.5 - Arbitrary File Upload vulnerability7.2 High
- sukhchain singh auto posterWordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability9.1 Critical
- pickplugins product designerWordPress Product Designer plugin <= 1.0.32 - PHP Object Injection vulnerability8.7 High
- vjinfotech wp import export liteWordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability4.4 Medium
- rapidload power-up for autoptimizeWordPress RapidLoad plugin <= 2.2.11 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- argie online coursewareSourceCodester Online Courseware addq.php cross site scripting3.5 Low
- argie online coursewareSourceCodester Online Courseware editt.php cross site scripting3.5 Low
- argie online coursewareSourceCodester Online Courseware activateall.php sql injection6.3 Medium
- argie online coursewareSourceCodester Online Courseware listscore.php sql injection6.3 Medium
- argie online courseware, online courseware project courseware +1 moreSourceCodester Online Courseware activateteach.php sql injection6.3 Medium
- argie online coursewareSourceCodester Online Courseware activatestud.php sql injection6.3 Medium
- argie online courseware, online courseware project courseware +1 moreSourceCodester Online Courseware deactivatestud.php sql injection6.3 Medium
- argie online coursewareSourceCodester Online Courseware saveedit.php sql injection6.3 Medium
- argie online coursewareSourceCodester Online Courseware edit.php sql injection6.3 Medium
- argie online coursewareSourceCodester Online Courseware deactivateteach.php sql injection6.3 Medium
- huawei emui, harmonyos +1 morePermission verification vulnerability in the lock screen module. Impact: Successful exploitation...5.3 Medium
- Show moreLoading…