CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- campcodes online event management systemCampcodes Online Event Management System index.php sql injection6.3 Medium
- campcodes online event management systemCampcodes Online Event Management System process.php sql injection6.3 Medium
- subnet substation server, subnet solutions powersystem server, substation server 2021 +1 more +3 moreSUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Component8.6 High
- byzoro smart s80 management platform, smart s80 +1 moreByzoro Smart S80 Management Platform userattestation.php unrestricted upload4.7 Medium
xorg-serverUbuntu,xwaylandUbuntu +1 morexorg-server, xwayland regressionNo score- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu: virtio: dma reentrancy issue leads to double free vulnerability8.2 High
- beaver builder themer, fastlinemedia beaver themer +1 moreBeaver Themer <= 1.4.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode6.4 Medium
- creativeminds invitation code content restriction plugin from creativemindsInvitation Code Content Restriction Plugin from CreativeMinds <= 1.5.4 - Reflected Cross-Site Scripting6.1 Medium
- caseproof memberpressMemberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error6.1 Medium
- beaver builder themer, fastlinemedia beaver themer +1 moreBeaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode6.5 Medium
- devolutions server, remote desktop manager +1 moreImproper permission handling in the vault offline cache feature in Devolutions Remote Desktop...4.3 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget6.4 Medium
- revolution slider slider revolutionRevslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget6.4 Medium
- radiustheme classified listing, techlabpro1 classified listing – ai-powered classified ads & business directory plugin, classified listing plugin +2 moreClassified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization6.5 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode6.4 Medium
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support +1 moreWP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id7.2 High
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag6.4 Medium
- brainstormforce astraAstra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name6.4 Medium
- hidekazu ishikawa vk all in one expansion unitVK All in One Expansion Unit <= 9.95.0.1 - Information Exposure6.5 Medium
- comesio relevanssi – a better search, relevanssi, relevanssi premium +1 more +3 moreRelevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update5.3 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsquared simply schedule appointments +1 moreAppointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection8.8 High
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- silverks grapheneGraphene <= 2.9.2 - Missing Authorization5.3 Medium
- ecwid by lightspeed ecommerce shopping cartEcwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- livemesh addons by elementor, livemeshelementor addons for elementor +1 moreElementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget6.4 Medium
- webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 moreElementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget6.4 Medium
- bfintal stackable – page builder gutenberg blocksStackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block6.4 Medium
- livemesh addons by elementor, livemeshelementor addons for elementor +1 moreElementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget6.4 Medium
- podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 morePods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution8.8 High
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget6.4 Medium
- tausworks global elementor buttonsGlobal Elementor Buttons <= 1.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via button link6.4 Medium
- wpeverest everest forms, everest forms – contact form, payment form, quiz, survey & custom form builder +1 moreEverest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url7.2 High
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS6.4 Medium
- morehubbub hubbub lite, nerdpress hubbub lites, nerdpressteam hubbub lite – fast, free social sharing and follow buttons +2 moreHubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection7.5 High
- athemes sydney toolboxSydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery6.4 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry7.2 High
- filemanagerpro file managerFile Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal6.8 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget6.4 Medium
- pagelayer, softaculous page builder: pagelayer – drag and drop website builder +1 morePage Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes6.4 Medium
- cmb2CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection7.5 High
- podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 morePods - Custom Content Types and Fields - Missing Authorization4.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- bob watu quizWatu Quiz <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- pluginsware advanced classifieds & directory proAdvanced Classifieds & Directory Pro <= 3.0.0 - Missing Authorization to Arbitrary Attachment Deletion4.3 Medium
- blazethemes newsmaticNewsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content5.3 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy6.4 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- jackdewey link libraryLink Library <= 7.6.6 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…