CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- helderk maintenance modeWordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability3.7 Low
- quanticalabs chauffeur taxi booking system for wordpressWordPress Chauffeur Taxi Booking System for WordPress plugin <= 6.9 - Broken Authentication vulnerability8.2 High
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability5.3 Medium
- pluginus husky – products filter for woocommerce (formerly woof), husky - products filter professional for woocommerce +1 moreWordPress HUSKY plugin <= 1.3.5.2 - Remote Code Execution (RCE) vulnerability8.8 High
- everpress mailsterWordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability8.1 High
- highfivery zero spam for wordpress, highfivery llc zero spam +1 moreWordPress Zero Spam for WordPress plugin <= 5.5.6 - Bypass Spam Protection vulnerability5.3 Medium
- boldgrid weformsWordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability5.3 Medium
- astoundify simple registration for woocommerceWordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- hamid alinia login with phone numberWordPress Login with phone number plugin <= 1.7.16 - Privilege Escalation vulnerability8.8 High
- appscreo easy social share buttonsWordPress Easy Social Share Buttons plugin <= 9.4 - Local File Inclusion vulnerability8.5 High
- coderevolution demo my wordpressWordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability6.3 Medium
- wp sharks s2member proWordPress s2Member plugin <= 240315 - Privilege Escalation vulnerability7.5 High
- sizam rehubWordPress Rehub theme <= 19.6.1 - Local File Inclusion vulnerability8.0 High
- sizam rehubWordPress Rehub theme <= 19.6.1 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
- wholesale wholesalexWordPress WholesaleX plugin <= 1.3.2 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- artbees sellkitWordPress SellKit plugin <= 1.8.1 - Arbitrary File Download vulnerability6.5 Medium
- premmerce permalink manager for woocommerceWordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability8.3 High
- valvepress automaticWordPress Automatic plugin <= 3.92.0 - CSRF to Privilege Escalation vulnerability8.8 High
- valvepress automaticWordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability9.3 Critical
- elementor website builderWordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability8.5 High
- masteriyo, masteriyo - lms +1 moreWordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability9.8 Critical
- boldgrid total upkeepWordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability7.5 High
- the events calendar bookitWordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability6.5 Medium
- strategy11 formidable formsWordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability5.3 Medium
- webwizards saleskingWordPress SalesKing plugin <= 1.6.15 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability8.8 High
- filipe seabra wordpress manutençãoWordPress WordPress Manutenção plugin <= 1.0.6 - Bypass vulnerability3.7 Low
- roxnor wp ultimate reviewWordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability5.3 Medium
- bill minozzi car dealerWordPress cardealer plugin <= 4.15 - Content Injection vulnerability2.7 Low
- webtoffee woocommerce pdf invoices, packing slips, delivery notes and shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability7.2 High
- glowlogix wp frontend profileWordPress WP Frontend Profile plugin <= 1.3.1 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- powerfulwp local delivery drivers for woocommerceWordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability9.8 Critical
- abdul hakeem build app onlineWordPress Build App Online plugin <= 1.0.19 - Authenticated Privilege Escalation vulnerability8.8 High
- ioss wp mlm unilevelWordPress WP MLM Unilevel plugin <= 4.0 - Unauthenticated Account Takeover vulnerability9.8 Critical
- saleswonder webinarignitionWordPress WebinarIgnition plugin <= 3.05.0 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- brainstorm force ultimate addons for beaver builderWordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.13 - Limited Arbitrary File Download vulnerability6.3 Medium
- brainstorm force ultimate addons for beaver builderWordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerability8.8 High
- repute infosystems armemberWordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability8.8 High
- brainstorm force ultimate addons for elementorWordPress Ultimate Addons for Elementor plugin <= 1.36.20 - Privilege Escalation vulnerability8.8 High
- spoonthemes adifier systemWordPress Adifier System plugin < 3.1.4 - Local File Inclusion vulnerability7.5 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability8.8 High
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerability6.8 Medium
- gvectors wpforo forum, wpforo forum +1 moreWordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerability7.3 High
- thrive themes theme builder, thrivethemes thrive themes builder +1 moreWordPress Thrive Theme Builder theme < 3.24.0 - Authenticated Privilege Escalation vulnerability8.8 High
- miniorange wordpress social login and register (discord, google, twitter, linkedin)WordPress Social Login, Social Sharing by miniOrange plugin <= 7.6.6 - Authenticated Privilege Escalation vulnerability8.0 High
- wedevs wp user frontendWordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability7.2 High
- qode interactive qi addons for elementorWordPress Qi Addons For Elementor plugin <= 1.6.3 - Local File Inclusion vulnerability6.4 Medium
- posimyth the plus addons for elementor, the plus addons for elementor pro +1 moreWordPress The Plus Addons for Elementor Pro plugin <= 5.2.8 - Unauthenticated Local File Inclusion vulnerability8.6 High
- room 34 creative services, llc ics calendarWordPress ICS Calendar plugin <= 10.12.0.3 - SSRF and Arbitrary File Read vulnerability8.2 High
- Show moreLoading…