CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- bob arigato autoresponder and newsletterWordPress Arigato Autoresponder and Newsletter plugin <= 2.7.2.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- warfare plugins social warfareWordPress Social Warfare plugin <= 4.4.5.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- cozmoslabs translatepressWordPress Translate Multilingual sites – TranslatePress plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- bplugins html5 audio player – the ultimate no-code podcast, mp3 & audio playerHTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- unitecms unlimited elements for elementorUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting6.1 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'6.4 Medium
- unitecms unlimited elements for elementorUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection7.2 High
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets6.4 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Cal…6.4 Medium
- snow license manager, snowsoftware snow license manager +1 moreAuthentication bypass in Snow License Manager8.8 High
- brainstorm force spectra proSpectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation8.8 High
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Link6.4 Medium
- bozdoz recaptcha jetpackreCAPTCHA Jetpack <= 0.2.2 - Stored XSS via CSRF4.7 Medium
- bozdoz recaptcha jetpackreCAPTCHA Jetpack <= 0.2.2 - Settings Update via CSRF8.8 High
- e4jvikwp vikbooking hotel booking engine & pms, vikbooking hotel booking engine, vikwp vikbooking hotel booking engine \& pms +2 moreVikBooking < 1.6.8 - Broken Access Control5.9 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreVikBooking < 1.6.8 - Insecure Direct Object References8.1 High
- unknown white label cmsWhite Label CMS <= 2.7.3 - Missing Authorization to Plugin Settings Reset5.3 Medium
- d-link dar-8000-10, dlink dar-8000-10 firmware +1 moreD-Link DAR-8000-10 importhtml.php deserialization5.3 Medium
- technitium dns serverThe DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service ...7.5 High
- g-sky vehicle management systemAn issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges...9.8 Critical
- google chrome, chromium, fedoraproject fedora +2 moreUse after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who...9.6 Critical
- nvidia chatrtxCVE5.5 Medium
- nvidia chatrtxCVE7.5 High
- nvidia chatrtxCVE7.5 High
- nvidia triton inference serverCVE6.5 Medium
- nvidia triton inference serverCVE5.5 Medium
- nvidia triton inference serverCVE9.0 Critical
- netflix geniePath Traversal vulnerability via File Uploads in Genie9.9 Critical
theloungenpmthelounge may publicly disclose of all usernames/idents via port 113No score- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System conversation_history_admin.php cross site scripting5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System create_events.php cross site scripting5.3 Medium
- stellar stellar-coreStellar-core's Overlay - security fix for DDoS mitigation5.9 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System emarks_range_grade_update_form.php cross site scripting5.3 Medium
- p-themes porto theme - functionality, portotheme functionality +1 morePorto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta8.8 High
- p-themes porto theme - functionalityPorto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode8.8 High
- monetizemore advanced ads – ad manager & adsense, wpadvancedads advanced ads - ad manager \& adsense +1 moreAdvanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Admin+) PHP Object Injection7.2 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload8.8 High
- giuliopanda adfo – custom data in admin dashboardADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scripting6.1 Medium
- codewoogeek back in stock notifier for woocommerce | woocommerce waitlist proBack In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution6.5 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate6.4 Medium
- squelch tabs and accordions shortcodesSquelch Tabs and Accordions Shortcodes <= 0.4.7 - Cross-Site Request Forgery4.3 Medium
- brainstormforce starter templates – ai-powered templates for elementor & gutenbergStarter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgery4.3 Medium
- themify shortcodes, themifyme themify shortcodes +1 moreThemify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode6.4 Medium
- davidanderson testimonial sliderTestimonial Slider <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpjoli joli faq seo – wordpress faq pluginJoli FAQ SEO – WordPress FAQ Plugin <= 1.3.2 - Cross-Site Request Forgery4.3 Medium
- jottlieb last viewed posts by wpbeginnerLast Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection9.8 Critical
- upwerd visual footer credit removerVisual Footer Credit Remover <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 moreThe Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- Show moreLoading…