CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- argoproj argo cd, argo-cd +1 moreUnauthenticated Access to sensitive settings in Argo CD5.3 Medium
- denoPrivate npm registry support used scope auth token for downloading tarballs7.6 High
- kanboardKanboard affected by Project Takeover via IDOR in ProjectPermissionController8.2 High
- argoproj argo cd, argo-cd +1 moreArgo CD allows authenticated users to enumerate clusters by name4.3 Medium
- cubecartDirectory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute...9.8 Critical
s2n-tlscrates.ios2n-tls has a potentially observable differences in RSA premaster secret handlingNo score- volkswagen group charging gmbh - elli, evbox id charger connect & pro, volkswagen group charging gmbh elli evbox id charger connect and pro, vw id.charger connect firmware +1 more +3 moreID Charger Connect & Pro - JWT-Null-Algorithm6.3 Medium
- stock management system project management systemSourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php.9.8 Critical
qemuUbuntuqemu regressionNo score- summar mentor, summar software mentor – employee portal, summarsoftware mentor employee portal +2 moreUnreliable data deserialization vulnerability in Mentor10.0 Critical
- wbcomdesigns custom font uploader, wbcom designs – custom font uploader +1 moreWbcom Designs - Custom Font Uploader <= 2.3.4 - Missing Authorization to Font Deletion4.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- extend themes colibri page builderColibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- born05 craftcms plugin - two-factor authentication, two-factor authentication, craft cms +2 moreCraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use4.8 Medium
- born05 craftcms plugin - two-factor authentication, two-factor authentication +1 moreCraftCMS Plugin - Two-Factor Authentication - Password Hash Disclosure3.7 Low
- dulldusk php file manager, phpfilemanager +1 moreCross-Site Scripting in PHP File Manager by Dulldusk6.1 Medium
- unitecms unlimited elements for elementorUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter8.8 High
- multivendorx, wcmp multivendorx – woocommerce multivendor marketplace solutions +1 moreMultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter6.4 Medium
- solarwinds serv-uSolarWinds Serv-U L Directory Transversal Vulnerability8.6 High
- qode qi blocksQi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- sysaidSysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9.1 Critical
- sysaidSysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9.9 Critical
- bitdefender gravityzone, gravityzone console on-premise +1 moreHost whitelist parser issue in GravityZone Console On-Premise (VA-11554)8.1 High
- xootix login/signup popup ( inline form + woocommerce ), login\/signup popup +1 moreLogin/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure4.3 Medium
- quomodosoft elementsready, elementsready addons for elementor +1 moreElementsReady Addons for Elementor <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- membersonly buddypress members onlyBuddyPress Members Only <= 3.4.8 - Improper Access Control to Sensitive Information Exposure via REST API5.3 Medium
- master-addons prettyphoto, ibabar prettyphoto – simple lightbox plugin +1 moreWordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter6.4 Medium
- nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library ), wpthemespace magical addons for elementor +1 moreMagical Addons For Elementor <= 1.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wshberlin startklar elementor addons, web-shop-host startklar elmentor addons +1 moreStartklar Elementor Addons <= 1.7.15 - Unauthenticated Path Traversal to Arbitrary Directory Deletion9.1 Critical
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment5.3 Medium
- martintod rotating tweets, mpntod rotating tweets (twitter widget and shortcode) +1 moreRotating Tweets (Twitter widget and shortcode) <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- willnorris open graphOpen Graph <= 1.11.2 - Unauthenticated Sensitive Information Exposure5.3 Medium
- themesflat addons for elementorThemesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via URLs6.4 Medium
- themesflat addons for elementorThemesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets6.4 Medium
- wppool wp dark mode, wp dark mode – improve accessibility with ai powered dark theme +1 moreWP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing Authorization4.3 Medium
- themesflat addons for elementorThemesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles6.4 Medium
- artbees sellkit, sellkit – funnel builder and checkout optimizer for woocommerce to sell more, faster +1 moreSellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- extendthemes materialis companionMaterialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode6.4 Medium
- themesflat addons for elementorThemesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Tags6.4 Medium
- qodeinteractive qi addons for elementorQi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget6.4 Medium
- adamskaat countdown, coming soon, maintenance – countdown & clock, edmonsoft countdown builder +1 moreCountdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection5.4 Medium
- axelerant testimonials widgetTestimonials Widget <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via testimonials Shortcode6.4 Medium
- codeless cowidgets – elementor addons, cowidgets elementor addons +1 moreCowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion8.8 High
- cleversoft clever addons for elementorClever Addons for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple CAFE Widgets6.4 Medium
- johnnash1975 easy social like box – popup – sidebar widget, easy social like box popup sidebar widget +1 moreEasy Social Like Box – Popup – Sidebar Widget <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- lvaudore the moneytizerThe Moneytizer <= 9.6.3 - Missing Authorization via multiple AJAX actions8.1 High
- biplob018 image hover effects for elementor with lightbox and flipboxImage Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters6.4 Medium
- essentialplugin album and image gallery plus lightboxAlbum and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution6.5 Medium
- flowdee easyazon – amazon associates affiliate plugin, getaawp amazon affiliates +1 moreEasyAzon – Amazon Associates Affiliate Plugin <= 5.1.0 - Reflected Cross-Site Scripting via easyazon-cloaking-locale6.1 Medium
- restrict for elementor, tickera restrict for elementor +1 moreRestrict for Elementor <= 1.0.7 - Protection Mechanism Bypass5.3 Medium
- Show moreLoading…