CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- favethemes houzezWordPress Houzez theme <= 2.7.1 - Privilege Escalation9.8 Critical
- booklyWordPress Bookly plugin <= 21.7.1 - Authenticated Arbitrary File Deletion vulnerability7.7 High
- favethemes houzez, houzez login register +1 moreWordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation9.8 Critical
- watchtowerhq watchtower, watchtowerhq +1 moreWordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation9.8 Critical
- joomsky js help desk, js help desk – best help desk & support plugin, jshelpdesk +2 moreWordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability9.1 Critical
- vova shortcodes ultimateWordPress Shortcodes Ultimate plugin <= 5.12.6 - Arbitrary File Download vulnerability7.1 High
- web-settler landing page builder – free landing page templatesWordPress Landing Page Builder – Free Landing Page Templates plugin <= 3.1.9.9 - Local File Inclusion vulnerability6.8 Medium
- qube one ltd. redirection for contact form 7WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerability7.6 High
- joe dolson my ticketsWordPress My Tickets plugin <= 1.9.11 - Payment Bypass Vulnerability7.5 High
- rank math seo, rank math seo math seo +1 moreWordPress Rank Math SEO plugin <= 1.0.107.2 - Local File Inclusion vulnerability7.6 High
- german mesky gmaceWordPress GMAce plugin <= 1.5.2 - Arbitrary File Download vulnerability4.9 Medium
- oceanwpWordPress OceanWP theme <= 3.4.1 - Authenticated Local File Inclusion vulnerability7.6 High
- mainwp code snippets extensionWordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution Vulnerability9.9 Critical
- unknown yarpp, yarpp yet another related posts plugin +1 moreWordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusion7.7 High
- 8blocks 1003 mortgage applicationWordPress 1003 Mortgage Application plugin <= 1.75 - Local File Inclusion7.7 High
- fmeaddons conditional checkout fields for woocommerceWordPress Conditional Checkout Fields for WooCommerce plugin <= 1.2.3 - Broken Authentication vulnerability5.3 Medium
- unknown defender security, wpmudev defender +1 moreWordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability5.0 Medium
- copymatic, copymatic – ai content writer & generator, ryanfaber copymatic – ai content writer & generator +2 moreWordPress Copymatic plugin <= 1.6 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
- 8theme xstore coreWordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability8.2 High
- felix moira popup more popups, felixmoira popup more popups\, lightboxes\, and more popup modules +1 moreWordPress Popup – Popup More Popups plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ghozylab popup builderWordPress Easy Notify Lite plugin <= 1.1.29 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- detheme dethemekit for elementorWordPress DethemeKit For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pluginops landing page builderWordPress Landing Page Builder <= 1.5.1.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- ivanweb popup4phonePopup4Phone <= 1.3.2 - Editor+ Stored XSS6.1 Medium
- ivanweb popup4phonePopup4Phone <= 1.3.2 - Unauthenticated Stored XSS6.1 Medium
- imagely nextgen galleryNextgen Gallery < 3.59.1 - Admin+ Stored XSS4.3 Medium
- swift framework socialdriver-framework, swiftideas swift framework +1 moreSwift Framework < 2024.0.0 - Contributor+ Stored XSS via Shortcode6.5 Medium
- visualmodo borderlessWordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pencidesign penci soledad data migratorPenci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion9.8 Critical
- joblib project joblibjoblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib...7.5 High
- nethesis nethserverThe WebTop package for NethServer 7 and 8 allows stored XSS (for example, via the Subject field...8.8 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege Vulnerability7.8 High
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 moreMaster Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- intel ethernet adapter complete driver, ethernet controller i225-it firmware, ethernet controller i225-lm firmware +9 more +11 moreImproper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225...7.2 High
- intel alder lake, comet lake, rocket lake +1 more +3 moreImproper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to...6.1 Medium
- intel alder lake, amber lake, coffee lake +5 more +7 moreImproper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to...7.2 High
- intel graphics performance analyzer, graphics performance analyzers framework +1 moreUncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow...6.7 Medium
- intel comet lakeImproper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to...7.2 High
- intel graphics performance analyzersUncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an...6.7 Medium
- intel graphics performance analyzer, graphics performance analyzers +1 moreIncorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may...7.8 High
- intel graphics performance analyzersImproper access control in some Intel(R) GPA software installers before version 2023.3 may allow...7.3 High
- intel graphics performance analyzer, graphics performance analyzers framework +1 moreImproper access control in some Intel(R) GPA Framework software installers before version 2023.3...7.8 High
- intel graphics performance analyzer, graphics performance analyzers +1 moreIncorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may...8.2 High
- intel media sdkImproper buffer restrictions in Intel(R) Media SDK software all versions may allow an...3.3 Low
- intel thunderbolt dch driver, thunderbolt non-dch driver +1 moreImproper access control for some Intel(R) Thunderbolt driver software before version 89 may allow...7.0 High
- intel media sdk, onevpl gpu runtime +1 moreNULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an...3.3 Low
- intel media sdk, onevpl gpu runtime +1 moreOut-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before...3.9 Low
- intel media sdk, onevpl gpu runtime +1 moreOut-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5...3.9 Low
- intel media sdkImproper input validation in Intel(R) Media SDK software all versions may allow an authenticated...5.9 Medium
- intel media sdkImproper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user...4.8 Medium
- Show moreLoading…