CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- kubernetes cri-o, red hat enterprise linux 8, enterprise linux 9 +8 more +10 moreCri-o: malicious container can create symlink on host8.1 High
- tenda o3 firmware, o3v2 firmware +1 moreTenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn...9.8 Critical
typo3/cmsPackagistDenial of Service (DoS) attack possibility in TYPO3 component Indexed SearchNo scoretypo3/cmsPackagistTypo3 Arbitrary File Disclosure in Form ComponentNo score- solarwinds platformSolarWinds Platform Stored XSS Vulnerability7.1 High
- solarwinds platformSolarWinds Platform Race Condition Vulnerability6.4 Medium
- solarwinds platformSolarWinds Platform SWQL Injection Vulnerability7.5 High
typo3/cmsPackagistCross-Site Scripting (XSS) in TYPO3 component CSS styled contentNo score- idccmsidccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin...8.8 High
typo3/cmsPackagistXML External Entity (XXE) Processing in TYPO3 CoreNo score- idccmsidccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin...8.8 High
typo3/cmsPackagistCross-Site Scripting (XSS) in TYPO3 component BackendNo score- idccmsidccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- pimcorePimcore Vulnerable to Flooding Server with Thumbnail files7.5 High
- brian batt - elearningfreak.com insert or embed articulate content into wordpress, elearningfreak insert or embed articulate content +1 moreInsert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe Injection5.4 Medium
- pdfcrowd save as pdf plugin by pdfcrowd, save as pdf +1 moreWordPress Save as PDF Plugin by Pdfcrowd plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- spiffy plugins wp flow plusWordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- saso nikolov event tickets with ticket scannerWordPress Event Tickets with Ticket Scanner plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- visual composer website builder, visualcomposer visual composer website builder +1 moreWordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cyberchimps responsiveWordPress Responsive theme <= 5.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- brave, brave popup builder +1 moreWordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpvivid backup for mainwp, wpvividplugins wpvivid backup for mainwp +1 moreWordPress WPvivid Backup for MainWP plugin <= 0.9.32 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themesflat addons for elementorWordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 moreWordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- codeless cowidgets – elementor addons, cowidgets - elementor +1 moreWordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- deluxethemes userproWordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability9.8 Critical
- wow-company woocommerce – recent purchases, woocommerce - recent purchases +1 moreWoocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerability4.9 Medium
- easydigitaldownloads easy digital downloads, wow-company easy digital downloads – recent purchases +1 moreWordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability9.6 Critical
- dexta dextaz ping, dextaz ping project ping +1 moreWordPress Dextaz Ping plugin <= 0.65 - Remote Code Execution (RCE) vulnerability9.1 Critical
- select-themes stockholm coreWordPress Stockholm Core plugin <= 2.4.1 - Local File Inclusion vulnerability8.5 High
- select-themes stockholmWordPress Stockholm theme <= 9.6 - Local File Inclusion vulnerability8.5 High
- select-themes stockholmWordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
- shaonsina sina extension for elementorWordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability6.5 Medium
- xforwoocommerceWordPress XforWooCommerce plugin <= 2.0.2 - Authenticated Local File Inclusion vulnerability8.8 High
- bdthemes element pack pro, element pack +1 moreWordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability8.5 High
- 8theme xstoreWordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
- 8theme xstore coreWordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability8.5 High
- betteraddons better elementor addonsWordPress Better Elementor Addons plugin <= 1.4.1 - Local File Inclusion vulnerability6.5 Medium
- bricks builder, bricksbuilder bricks, codeer limited bricks builder +2 moreWordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability10.0 Critical
- sem-cms semcmsA SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive...7.5 High
- sem-cms semcmsA SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive...5.9 Medium
- miniorange malware scannerWordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerability5.3 Medium
- all in one wp security & firewall team in one wp security & firewallWordPress All-In-One Security (AIOS) plugin <= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerability3.7 Low
- blazzdev rate my post, feedbackwp rate my post – wp rating system +1 moreWordPress Rate my Post – WP Rating System plugin <= 3.4.2 - Broken Access Control vulnerability5.3 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability5.3 Medium
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability5.3 Medium
- wpmu dev brandaWordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability5.3 Medium
- booster for woocommerce, pluggabl llc booster elite for woocommerce +1 moreWordPress Booster Elite for WooCommerce plugin < 7.1.3 - Authenticated Production Creation/Modification Vulnerability6.5 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials...8.1 High
- Show moreLoading…