CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- blueglass jobs for wordpress, blueglassch job postings +1 moreJobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting via job-search6.1 Medium
- 10web slider, slider by 10web +1 moreWordPress Sliderby10Web plugin <= 1.2.54 - Cross Site Scripting (XSS) vulnerability7.1 High
- gloriafood restaurant menu – food ordering system – table reservationWordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- averta master sliderWordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- lenderd mortgage calculators wpWordPress Mortgage Calculators WP plugin <= 1.56 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bowo debug log managerWordPress Debug Log Manager plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- standalonetech terawallet, terawallet – for woocommerce +1 moreWordPress TeraWallet plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- extendwp import content in wordpress & woocommerce with excelWordPress Import Content in WordPress & WooCommerce with Excel plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gutenberg project gutenberg, munir kamal gutenberg block editor toolkit +1 moreWordPress Gutenberg Block Editor Toolkit plugin <= 1.40.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- solarwinds platformSolarWinds Platform Cross Site Scripting Vulnerability7.5 High
- solarwinds platformSolarWinds Platform SWQL Injection Vulnerability7.5 High
- solarwinds platformSolarWinds Platform Arbitrary Open Redirection Vulnerability7.0 High
- envialosimple envíalosimple, email marketing y newsletters +1 moreWordPress EnvíaloSimple plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability5.8 Medium
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webfood katteneWordPress Kattene plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- daniele de rosa backend designerWordPress Backend Designer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- voidcoders, innovs void elementor whmcs elements for elementor page builderWordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpbits addons for elementor page builderWordPress WPBITS Addons For Elementor Page Builder plugin <= 1.3.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- attesawp attesa extra, 100plugins open user map +1 moreWordPress Attesa Extra plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mat bao corp wp helper premiumWordPress WP Helper Premium plugin < 4.6.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- eric-oliver mächler dsgvo youtubeWordPress DSGVO Youtube plugin <= 1.4.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wordpressdotorg wordpress importer, xylusthemes wp smart import +1 moreWordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ba-booking ba book everythingWordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- deepak anand wp dummy content generatorWordPress WP Dummy Content Generator plugin <= 3.2.1 - Arbitrary Code Execution vulnerability10.0 Critical
- wordpress popup anythingWordPress Popup Anything plugin <= 2.8 - Broken Access Control vulnerability5.3 Medium
- themekraft woobuddy, buddypress woocommerce my account integration +1 moreWordPress WooBuddy plugin <= 3.4.20 - PHP Object Injection vulnerability8.5 High
- plechev andrey wp-recall, wordpress adserve +1 moreWordPress WP-Recall plugin <= 16.26.5 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- pepro dev. group peprodev cf7 databaseWordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- palscode support genix, support genix genix +1 moreWordPress Support Genix plugin <= 1.2.3 - Broken Access Control lead to Arbitrary File Upload vulnerability9.9 Critical
- ovic team responsive wpbakery, unknown ovic responsive wpbakery +1 moreWordPress Ovic Responsive WPBakery plugin <= 1.3.0 - Broken Access Control vulnerability5.4 Medium
- apache airflowApache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used4.3 Medium
- themeisle otter blocksOtter Blocks < 2.6.6 - Contributor+ Stored XSS6.1 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site S…6.4 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site S…6.4 Medium
- broadcom brocade sannav, brocade sannav +1 morecleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav6.5 Medium
matioOSS-FuzzHeap-use-after-free in Mat_VarFreeNo scorecycloneddsOSS-FuzzHeap-buffer-overflow in DDS_Security_Deserialize_ParticipantBuiltinTopicDataNo scoreapache-commons-configurationOSS-FuzzSecurity exception in java.base/java.util.stream.AbstractPipeline.evaluateNo scorelcmsOSS-FuzzHeap-buffer-overflow in SetDataFormatNo score- frappe lms, totara enterprise lms +1 moreTotara LMS User Selector cross-site request forgery2.3 Low
- frappe lms, totara, totara enterprise lms +2 moreTotara LMS User Selector check.php cross site scripting5.1 Medium
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - security updateNo scoretzdataDebiantzdata - new timezone databaseNo score- totolink n300rt firmwareTOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability...5.4 Medium
- totolink n300rt, n300rt firmware +1 moreTOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability...6.5 Medium
- totolink n300rt, n300rt firmware +1 moreTOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability...4.3 Medium
- totolink n300rt firmwareTOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability...6.1 Medium
- totolink n300rt, n300rt firmware +1 moreTOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability...5.5 Medium
- totolink ex200, ex200 firmware +1 moreTOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through...6.8 Medium
- Show moreLoading…