CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tonjoo sangar sliderWordPress Sangar Slider plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- michael bester kimili flash embedWordPress Kimili Flash Embed plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- ashley novelistWordPress Novelist plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- churchthemes church content – sermons, events and moreWordPress Church Content plugin <= 2.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- multiparcels shipping for woocommerceWordPress MultiParcels Shipping For WooCommerce plugin < 1.16.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- daev.tech wp migration plugin db & files – wp synchroWordPress WP Synchro plugin <= 1.11.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- eyal fitoussi geo my wordpressWordPress GEO my WordPress plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- james ward wp mail catcherWordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability4.3 Medium
- omnisend email marketing for woocommerce by omnisendWordPress Email Marketing for WooCommerce plugin <= 1.14.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- scott kingsley clark crony cronjob managerWordPress Crony Cronjob Manager plugin <= 0.5.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- siteimproveWordPress Siteimprove plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- xlplugins nextmove, nextmove lite +1 moreWordPress NextMove Lite plugin <= 2.18.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- libsyn publisher hubWordPress Libsyn Publisher Hub plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- binsaifullah beafWordPress BEAF plugin <= 4.5.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tyche softwares order delivery date for woocommerceWordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- perrinalexandre05 affieasyWordPress AffiEasy plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- codemenschen gift vouchersWordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- implecode ecommerce product catalogWordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- cleverplugins seo boosterWordPress SEO Booster plugin <= 3.8.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- switchwp wp client reportsWordPress WP Client Reports plugin <= 1.0.22 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- asgaros forum, thomas belser asgaros forum +1 moreWordPress Asgaros Forum plugin <= 2.8.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- zoho campaignsWordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- zoho campaignsWordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ip2location country blocker, download ip2location country blocker +1 moreWordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- saleswonder webinarignitionWordPress WebinarIgnition plugin <= 3.05.8 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- wp swings wallet system for woocommerceWordPress Wallet System for WooCommerce plugin <= 2.5.9 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- awp classifieds team classifieds, strategy11team awp classifieds +1 moreWordPress AWP Classifieds plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tecno com.transsion.kolun.aiservice, hios +1 moreImproper Authentication in com.transsion.kolun.aiservice9.8 Critical
- videoyield.com ads.txt adminWordPress Ads.txt Admin plugin <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- magnigenie restropressWordPress RestroPress plugin <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- magepeople team wptravellyWordPress WpTravelly plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpwax legal pagesWordPress Legal Pages plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- levelfourdevelopment wp easycart, wp easycart easycart +1 moreWordPress Shopping Cart & eCommerce Store plugin <= 5.5.19 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- nick powers social author bioWordPress Social Author Bio plugin <= 2.4 - Stored XSS via Cross Site Request Forgery (CSRF) vulnerability7.1 High
- venugopal change default login logo,url and titleWordPress Change default login logo,url and title plugin <= 2.0 - CSRF to XSS vulnerability7.1 High
- kaloyan k. tsvetkov broken imagesWordPress Broken Images plugin <= 0.2 - CSRF to XSS vulnerability7.1 High
- kamlesh parmar sync post with other siteWordPress Sync Post With Other Site plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) to XSS vulnerability7.1 High
- jfrog artifactory, artifactory self-hosted +1 moreJFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users4.3 Medium
- exportfeed.com product feed on woocommerce for google, adtribes product feed pro for woocommerce +1 moreWordPress Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More plugin <= 3.5.7 - Auth. SQL Injection (SQLi) vulnerability7.6 High
- page visit counter advanced page visit counterWordPress Advanced Page Visit Counter plugin <= 8.0.6 - Auth. SQL Injection (SQLi) vulnerability7.6 High
- ba-booking ba book everythingWordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability8.5 High
- markus seyer find duplicatesWordPress Find Duplicates plugin <= 1.4.6 - Auth. SQL Injection vulnerability8.5 High
- realtyna organic idx plugin, organic idx +1 moreWordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability9.3 Critical
- codeboxr team cbx bookmark & favoriteWordPress CBX Bookmark & Favorite plugin <= 1.7.20 - SQL Injection vulnerability7.6 High
- nasirahmed forms to zapier, integromat, ifttt, workato, automate.io, elastic.io, built.io, apiant, webhookWordPress Forms to Zapier plugin <= 1.1.12 - Auth. SQL Injection vulnerability7.6 High
- wpzest disable comments | wpzestWordPress Disable Comments | WPZest plugin <= 1.51 - SQL Injection vulnerability7.6 High
- xenioushk bwl advanced faq managerWordPress BWL Advanced FAQ Manager plugin <= 2.0.3 - Auth. SQL Injection vulnerability7.6 High
- solwin user activity log pro, solwininfotech user activity log +1 moreWordPress User Activity Log Pro plugin <= 2.3.4 - Auth. SQL Injection vulnerability8.5 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.12 - SQL Injection vulnerability8.5 High
- Show moreLoading…