CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- pluginkollektiv antispam beeWordPress Antispam Bee plugin <= 2.11.3 - Country IP Restriction Bypass vulnerability5.3 Medium
- cartpauj register captchaWordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability6.5 Medium
- pickplugins tabs & accordionWordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerability5.4 Medium
- lester ‘gamerz’ chan wp-postratingsWordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability5.3 Medium
- marketing fire discussion boardWordPress Discussion Board plugin <= 2.4.8 - Content Injection vulnerability5.4 Medium
- dotonpaper pinpoint booking system, pinpoint booking system +1 moreWordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering6.5 Medium
- ip2location country blocker, download ip2location country blocker +1 moreWordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability5.3 Medium
- john darrel hide my wp ghostWordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability5.3 Medium
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +2 moreWordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability9.1 Critical
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability4.3 Medium
- samsung mobile galaxybudsmanager pc, samsung galaxy buds manager +1 moreArbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows...6.2 Medium
- samsung mobile live wallpaper pcArbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0 allows...6.2 Medium
- samsung android, samsung mobile devices +1 moreImproper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1...5.1 Medium
- samsung android, samsung mobile devices +1 moreIncorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService...6.2 Medium
- samsung android, samsung mobile devices +1 moreIncorrect use of privileged API vulnerability in registerBatteryStatsCallback in...6.2 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical...4.6 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows...6.4 Medium
- samsung android, samsung mobile devices +1 moreStack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows...6.4 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreHeap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June...7.3 High
- samsung android, samsung mobile devices +1 moreHeap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR...7.3 High
- samsung android, samsung mobile devices +1 moreImproper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local...6.1 Medium
- samsung android, samsung mobile devices +1 moreImproper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows...7.9 High
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows...4.2 Medium
- suretriggers, brainstormforce ottokit: all-in-one automation platform +1 moreSureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link Shortcode6.4 Medium
- fudugo fs product inquiryFS Product Inquiry <= 1.1.1 - Unauthenticated Stored XSS6.1 Medium
- fudugo fs product inquiryFS Product Inquiry <= 1.1.1 - Reflected XSS8.2 High
- buddyboss, unknown buddyboss-platform +1 moreBuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment5.3 Medium
- tipsandtricks-hq wp emember, unknown wp-emember +1 moreWP eMember < 10.3.9 - Reflected XSS8.3 High
- stellarwp the events calendarThe Events Calendar < 6.4.0.1 - Reflected XSS9.1 Critical
- kadencewp gutenberg blocks with ai, unknown gutenberg blocks with ai by kadence wp +1 moreGutenberg Blocks by Kadence Blocks < 3.2.37 - Contributor+ Stored XSS6.1 Medium
- jeff starr simple ajax chatSimple Ajax Chat < 20240412 - Admin+ Stored XSS5.4 Medium
- brian batt - elearningfreak.com insert or embed articulate content into wordpress, elearningfreak insert or embed articulate content +1 moreInsert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE5.4 Medium
- unknown wpupper share buttonsWPUpper Share Buttons <= 3.43 - Missing Authorization5.3 Medium
- freephp-1 nafeza prayer timeNafeza Prayer Time <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- codeless cowidgets – elementor addons, cowidgets elementor addons +1 moreCowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter6.4 Medium
- g5plus essential real estateEssential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- g5plus essential real estateEssential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion4.3 Medium
- dfactory download attachmentsDownload Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- shrinitech fluid notification barFluid Notification Bar <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- ishanverma authorize.net payment gateway for woocommerceAuthorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass5.3 Medium
- acceleration wp-db-table-editorWP-DB-Table-Editor <= 1.8.4 - Missing Authorization to Authenticated(Contributor+) Database Access7.5 High
- claudiosanches claudio sanches – checkout cielo for woocommerceClaudio Sanches – Checkout Cielo for WooCommerce <= 1.1.0 - Insufficient Verification of Data Authenticity to Order Payment Status Update5.3 Medium
- gelform social link pages: link-in-bio landing pages for your social media profilesSocial Link Pages: link-in-bio landing pages for your social media profiles <= 1.6.9 - Missing Authorization to Arbitrary Page Creation and Cross-Site Scripting7.2 High
- melapress admin notices managerAdmin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval4.3 Medium
- tagdiv composertagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode6.4 Medium
- phoeniixx social login lite for woocommerceSocial Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass9.8 Critical
- pokornydavid frontend registration – contact form 7Frontend Registration – Contact Form 7 <= 5.1 - Authenticated (Editor+) Privilege Escalation7.2 High
- zyxel nas326 firmware, nas542 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the command ...6.5 Medium
- Show moreLoading…