CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget6.4 Medium
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- p-themes portoPorto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts9.8 Critical
- redbitcz simpleshop, redbit sro simple shop +1 moreSimpleShop <= 2.10.0 - Cross-Site Request Forgery4.3 Medium
- rankmath seo, rank math seo – ai seo tools to dominate seo rankings +1 moreRank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- giuliopanda adfo – custom data in admin dashboardADFO – Custom data in admin dashboard <= 1.9.0 - Cross-Site Request Forgery4.3 Medium
- ravanh xml sitemap & google newsXML Sitemap & Google News <= 5.4.8 - Unauthenticated Local File Inclusion8.1 High
- swift ideas frameworkSwift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update5.3 Medium
- mihdan mihdan: yandex turbo feedMihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library ), wpthemespace magical addons for elementor +1 moreMagical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget6.4 Medium
- bdthemes prime slider – addons for elementor, prime slider +1 morePrime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- prasunsen hostelhostel <= 1.1.5.3 - Cross-Site Request Forgery4.3 Medium
- pt-guy content views – post grid & filter, recent posts, category posts … (shortcode, gutenberg blocks, and widgets for elementor)Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter6.4 Medium
- themelooks enter addons – ultimate template builder for elementor, enter addons +1 moreEnter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widget6.4 Medium
- swte swift performance liteSwift Performance Lite <= 2.3.6.18 - Incorrect Authorization to Authenticated (Subscriber+) Settings Modification5.4 Medium
- pure-chat pure chat – live chat & more!Pure Chat – Live Chat Plugin & More! <= 2.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- daext soccer engine – soccer plugin for wordpressSoccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery4.3 Medium
- swift ideas frameworkSwift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes6.4 Medium
- simple-membership-plugin simple membershipSimple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- monetizemore advanced ads – ad manager & adsenseAdvanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget6.4 Medium
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 22.5 - Reflected Cross-Site Scripting6.1 Medium
- redbitcz simpleshop, redbit sro simple shop +1 moreSimpleShop <= 2.10.2 - Missing Authorization5.3 Medium
- p-themes portoPorto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta8.8 High
- blocksera image hover effects – elementor addonImage Hover Effects - Elementor Addon <= 1.4.1 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widget6.4 Medium
- jordy meow meow galleryGallery Block (Meow Gallery) <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- buddypressBuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (Contributor+) Stored Cross-Site Scripting…6.4 Medium
- themelooks enter addons – ultimate template builder for elementor, enter addons +1 moreEnter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag6.4 Medium
- creativethemes blocksyBlocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products5.3 Medium
- unknown simple basic contact formSimple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting6.1 Medium
- smartypants sp project & document managerSP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update4.3 Medium
- elementor website builder, https://elementor.com/ elementor website builder pro +1 moreElementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- metaphorcreations ditty – responsive news tickers, sliders, and listsDitty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection8.8 High
- breakdanceBreakdance <= 1.7.1 - Authenticated (Contributor+) Remote Code Execution8.8 High
- custom field suite project field suite, matt gibbs custom field suite +1 moreCustom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify6.4 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System exam_timetable.php cross site scripting5.3 Medium
- nuki smart lock v2, smart lock v3 pro +1 moreAn issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple...7.1 High
- nuki bridge v1, bridge v2 +1 moreAn issue was discovered on certain Nuki Home Solutions devices. By sending a malformed HTTP verb,...7.5 High
- nuki bridge, smart lock, bridge firmware +1 more +3 moreAn issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access...6.4 Medium
- No product listedAn issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge...7.1 High
- nuki fob, keypad +1 moreAn issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access...7.6 High
- nuki smart lock v2, smart lock v3 pro +1 moreAn issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should...8.8 High
- nuki smart lockAn issue was discovered on certain Nuki Home Solutions devices. There is a buffer overflow over...6.3 Medium
- nuki bridge v1, smart lock +1 moreAn issue was discovered on certain Nuki Home Solutions devices. The code used to parse the JSON...9.8 Critical
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System exam_timetable_grade_wise.php cross site scripting5.3 Medium
- nuki bridge v1, bridge v2, smart lock v3 pro +2 moreAn issue was discovered on certain Nuki Home Solutions devices. Lack of certificate validation on...8.8 High
- oretnom23 human resource management systemSourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave...7.5 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System exam_timetable_insert_form.php cross site scripting5.3 Medium
- Show moreLoading…