CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- code tides advanced floating contentWordPress Advanced Floating Content plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.10.25 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shapedplugin widget post sliderWordPress Widget Post Slider plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- jeroen peters all-in-one like widgetWordPress All-in-one Like Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- nick halsey list custom taxonomy widgetWordPress List Custom Taxonomy Widget plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- webtoffee woocommerce shipping labelWordPress WooCommerce Shipping Label plugin <= 2.3.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- debaat wp media category managementWordPress WP Media Category Management plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- bloompixel max addons pro for bricksWordPress Max Addons Pro for Bricks plugin <= 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rometheme rtmkitWordPress RomethemeKit For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- repute info systems arformsWordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability8.5 High
- plechev andrey wp-recallWordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability9.3 Critical
- dell repository manager, repository manager (drm) +1 moreDell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in...3.3 Low
- plechev andrey wp-recallWordPress WP-Recall plugin <= 16.26.5 - SQL Injection vulnerability8.5 High
- dell repository manager, repository manager (drm) +1 moreDell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API...8.8 High
- streamweasels twitch integration, twitch player +1 moreWordPress StreamWeasels Twitch Integration plugin <= 1.7.8 - API Sensitive Data Exposure vulnerability5.3 Medium
- buffercode frontend dashboardWordPress Frontend Dashboard plugin <= 2.2.2 - Sensitive Data Exposure on PII vulnerability7.5 High
- e4j vikrentcar car rental management system, e4j s.r.l. vikrentcar +1 moreWordPress VikRentCar Car Rental Management System plugin <= 1.3.2 - Sensitive Data Exposure via Invoices vulnerability5.9 Medium
- themehigh email customizer for woocommerceWordPress Email Customizer for WooCommerce plugin <= 2.6.0 - Sensitive Data Exposure vulnerability7.5 High
- dell telemetry dashboard, wyse proprietary os (modern thinos), wyse thinos +2 moreTelemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure...6.2 Medium
- devitems ht megaWordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability4.3 Medium
- frédéric gilles fg joomla to wordpressWordPress FG Joomla to Wordpress plugin <= 4.20.2 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- jack arturo wp fusion liteWordPress WP Fusion Lite plugin <= 3.42.10 - Sensitive Data Exposure vulnerability4.3 Medium
- pickplugins post gridWordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability7.5 High
- patrick posner simply static, simply static static +1 moreWordPress Simply Static plugin <= 3.1.3 - Sensitive Data Exposure via Log File vulnerability7.5 High
- newslettersWordPress Newsletters plugin <= 4.9.5 - Sensitive Data Exposure vulnerability7.5 High
- carazo import and export users and customersWordPress Import and export users and customers plugin <= 1.26.2 - PHP Object Injection vulnerability4.4 Medium
- webtoffee import export wordpress usersWordPress Export and Import Users and Customers plugin <= 2.5.3 - Deserialization of untrusted data vulnerability5.4 Medium
- wp lab wp-lister lite for ebayWordPress WP-Lister Lite for eBay plugin <= 3.5.11 - Arbitrary File Upload vulnerability9.1 Critical
- webangon the pack elementor addonsWordPress The Pack Elementor addons plugin <= 2.0.8.2 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- pavex embed google photos albumWordPress Embed Google Photos album plugin <= 2.1.9 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- 2day.sk, webikon superfaktura woocommerceWordPress SuperFaktura WooCommerce plugin <= 1.40.3 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- culqiWordPress Culqi plugin <= 3.0.14 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreWordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- armemberplugin armemberWordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability9.1 Critical
- bloompixel max addons pro for bricksWordPress Max Addons Pro for Bricks plugin <= 1.6.1 - Unauthenticated Plugin Settings Reset vulnerability6.5 Medium
- roamwifi r10Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is...8.8 High
- roamwifi r10Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If...6.5 Medium
- unknown strong testimonialsStrong Testimonials < 3.1.12 - Contributor+ Stored XSS4.8 Medium
- premio floating chat widget, unknown floating chat widget: contact chat icons, whatsapp, telegram chat, line messenger, wechat, email, sms, call button +1 moreFloating Chat Widget < 3.1.9 - Editor+ Stored XSS3.8 Low
- unknown better commentsBetter Comments < 1.5.6 - Subscriber+ Stored XSS5.4 Medium
- unknown better commentsBetter Comments < 1.5.6 - Admin+ Stored XSS5.4 Medium
- unknown woocommerce customers managerWooCommerce Customers Manager < 29.8 - Subscriber+ Email Disclosure6.5 Medium
- unknown woocommerce customers manager, woocommerce customers manager +1 moreWooCommerce Customers Manager < 29.8 - Reflected XSS5.9 Medium
- importwp import wpImport WP < 2.13.1 - Admin+ Server-side Request Forgery6.1 Medium
- oretnom23 simple subscription website, simple subscription website project subscription website +1 moreSourceCodester Simple Subscription Website view_application.php sql injection6.3 Medium
ghostscriptOSS-FuzzSegv on unknown address in gx_device_forward_finalizeNo scorendpiOSS-FuzzStack-buffer-overflow in shoco_decompressNo score- cdbattags lua resty jwtcdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks by...8.1 High
- mayurik php task management systemSQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to...9.8 Critical
- Show moreLoading…