CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- mailcleanerMailCleaner Log File Endpoint cross site scripting4.3 Medium
- mailcleanerMailCleaner Admin Endpoints os command injection8.8 High
- mailcleanerMailCleaner Admin Interface cross site scripting4.3 Medium
- mailcleanerMailCleaner Email os command injection9.8 Critical
- aa-team wzoneWordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability9.3 Critical
- aa-team wzoneWordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability9.6 Critical
- 8theme xstore coreWordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability9.3 Critical
- 8theme xstoreWordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability9.3 Critical
- crelly slider project slider, fabio rinaldi crelly slider +1 moreWordPress Crelly Slider plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- sandor kovacs regenerate post permalinkWordPress Regenerate post permalink plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) leading to XSS vulnerability7.1 High
- gamipressGamiPress < 6.8.9 - Broken Access Control8.1 High
- rednao smart formsSmart Forms < 2.6.96 - Admin+ Stored XSS5.9 Medium
- piotnet addons for elementor proWordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- armorx android app, app +1 moreArmorX Android APP - MFA Bypass8.8 High
- extend themes althea wp, brite, colibri wp +4 more +6 moreBroken Access Control vulnerability affecting multiple WordPress themes by Extend Themes4.3 Medium
- super 8 livechat sdkSuper 8 livechat SDK - Cross-site Scripting6.1 Medium
pcre2OSS-FuzzUse-of-uninitialized-value in do_callout_jitNo scorecheckstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAstNo scorepistacheOSS-FuzzContainer-overflow in strtolNo scoreflexOSS-FuzzStack-buffer-underflow in filter_apply_chainNo scoremosquittoOSS-FuzzHeap-buffer-overflow in config__add_listenerNo score- theme horse wp portfolioWordPress WP Portfolio theme <= 2.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpzoom addons for elementor (templates, widgets), elementor addons +1 moreWordPress WPZOOM Addons for Elementor plugin <= 1.1.35 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themegrill colornewsWordPress ColorNews theme <= 1.2.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aa-team wzoneWordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- 8theme xstore coreWordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- 8theme xstoreWordPress XStore theme <= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- infomaniak network vod infomaniakWordPress VOD Infomaniak plugin <= 1.5.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- piotnet addons for elementor, piotnetdotcom piotnet addons for elementor +1 moreWordPress Piotnet Addons For Elementor plugin <= 2.4.26 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- piotnet addons for elementor proWordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- piotnet addons for elementor pro, forms +1 moreWordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- lbell pretty google calendarWordPress Pretty Google Calendar plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kailey lampert advanced most recent posts modWordPress Advanced Most Recent Posts Mod plugin <= 1.6.5.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- eftakhairul islam & sirajus salayhin easy set faviconWordPress Easy Set Favicon plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- toast plugins sticky anythingWordPress Sticky Anything plugin <= 2.1.5 - Broken Access Control to XSS vulnerability7.1 High
- kemory grubb recencio book reviewsWordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpopal opal widgets for elementorWordPress Opal Widgets For Elementor plugin <= 1.6.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- n-partner n-cloud firmware, n-reporter firmware +1 moreN-Reporter and N-Cloud from N-Partner - Os Command Injection8.8 High
- e-webinformationco fs-ezviewer, e-webinformationco. fs-ezviewer(web) +1 moreE-WEBInformationCo. FS-EZViewer(Web) - Sensitive Data Exposure9.8 Critical
- hgiga isherlock, isherlock 4.5, isherlock 5.5 +2 moreHGiga iSherlock - Command Injection7.2 High
- hgiga isherlock, isherlock 4.5, isherlock 5.5 +2 moreHGiga iSherlock - Command Injection7.2 High
- hgiga isherlock, isherlock 4.5, isherlock 5.5 +2 moreHGiga iSherlock - Arbitrary File Download4.9 Medium
- hgiga isherlock, isherlock 4.5, isherlock 5.5 +2 moreHGiga iSherlock - Arbitrary File Download4.9 Medium
pcre2OSS-FuzzUse-of-uninitialized-value in fast_forward_first_n_charsNo score- onosproject onos, traffic steering xapplication +1 moreOpen Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in...7.5 High
- onosproject rimedo-ts, traffic steering xapplication +1 moreOpen Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in...7.5 High
- o-ran-sc ric-plt-e2mgrO-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.9.8 Critical
- o-ran-sc ric-plt-e2mgrO-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.4.3 Medium
- No product listedThe O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for...7.5 High
- No product listedThe O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for...7.5 High
- Show moreLoading…