CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- apollo13themes rife freeWordPress Rife Free theme <= 2.4.19 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- posimyth the plus addons for elementor page builder lite, the plus addons for elementor +1 moreWordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gerritvanaaken podlove web player, podlove web player +1 moreWordPress Podlove Web Player plugin <= 5.7.3 - Sensitive Data Exposure vulnerability5.3 Medium
- theme freesia eventWordPress Event theme <= 1.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- uapp testimonial carousel for elementorWordPress Testimonial Carousel For Elementor plugin <= 10.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- theme freesia idyllicWordPress Idyllic theme <= 1.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- peregrine-themes bloglo, peregrinethemes blogvi +1 moreWordPress Bloglo and Blogvi themes affected by Cross Site Scripting (XSS) vulnerability6.5 Medium
- tribulant newslettersWordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- magnigenie restropressWordPress RestroPress plugin <= 3.1.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: Use request_module_nowait5.5 Medium
- realmag777 active products tables for woocommerce, pluginus woot +1 moreWordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wp moose kenta gutenberg blocks responsive blocks and block templates library for gutenberg editor, wpmoose kenta blocks +1 moreWordPress Kenta Gutenberg Blocks plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix division by zero in setup_dsc_config5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()7.6 High
- linux, linux kernel +1 moreKEYS: trusted: Fix memory leak in tpm2_key_encode()5.5 Medium
- linux, linux kernel +1 moreerofs: reliably distinguish block based and fscache mode5.5 Medium
- linux, linux kernel +1 moreremoteproc: mediatek: Make sure IPI buffer fits in L2TCM7.8 High
- yithemes yith custom loginWordPress YITH Custom Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- richardlerma auto coupons for woocommerceWordPress Auto Coupons for WooCommerce plugin <= 3.0.14 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability7.1 High
- themeisle visualizerWordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability8.5 High
- loopus wp visitors trackerWordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kognetics kognetiks chatbot, kognetiks chatbot for wordpress +1 moreWordPress Kognetiks Chatbot for WordPress plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- radiustheme the post gridWordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- theme freesia pixgraphyWordPress Pixgraphy theme <= 1.3.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpdevart gallery, responsive image gallery, gallery album +1 moreWordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerability8.5 High
- cm-wp woody code snippets, creative motion, will bontrager software, llc woody ad snippets +1 moreWordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- enea overclokk stellissimo text boxWordPress Stellissimo Text Box plugin 1.1.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- likeshopLikeshop Merchandise admin cross site scripting5.1 Medium
- templatesnext onepagerWordPress TemplatesNext OnePager plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- el tiempo weather widget proWordPress Weather Widget Pro plugin <= 1.1.40 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ceikay tooltip ckWordPress Tooltip CK plugin <= 2.2.15 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gsheetconnector cf7 google sheets connector, westerndeal gsheetconnector for cf7 – connect contact form 7 to google sheets and send form submissions in real time +1 moreCF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Update6.5 Medium
- salonbookingsystem salon booking system, wordpresschef salon booking system – free version +1 moreSalon booking system <= 9.9 - Missing Authorization4.3 Medium
- sktthemes skt addons for elementorSKT Addons for Elementor <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative Slider Widgets7.4 High
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file6.7 Medium
- awordpresslife formulaFormula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_action6.1 Medium
- awordpresslife formulaFormula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins6.1 Medium
- webfactory minimal coming soon – coming soon page, webfactoryltd minimal coming soon \& maintenance mode +1 moreMinimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Change6.3 Medium
- webfactory wp resetWP Reset <= 2.02 - Missing Authorization to License Key Modification4.3 Medium
- webfactory wp force ssl & https ssl redirect, webfactoryltd wp force ssl +1 moreWP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update4.2 Medium
- ideabox creations powerpack pro for elementor, powerpack pro for elementor, ideabox powerpack addons for elementor +2 morePowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege Escalation8.8 High
- brainstormforce cards for beaver builderCards for Beaver Builder <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards Widget6.4 Medium
- libfprint fprintdfprintd through 1.94.3 lacks a security attention mechanism, and thus unexpected actions might be...7.3 High
- libarchiveLibarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name...9.1 Critical
zfr/zfr-oauth2-server-modulePackagistzfr authentication adapter did not verify validity of tokens7.5 Highzendframework/zendopenidPackagistZendOpenID potential security issue in login mechanism7.5 Highzendframework/zend-captchaPackagistZend-Captcha Information Disclosure and Insufficient Entropy vulnerability7.5 Highwilldurand/js-translation-bundlePackagistwilldurand/js-translation-bundle potential path traversal attack and remote code injection9.8 Criticalvrana/adminerPackagistAdminer file disclosure vulnerability7.5 High- Show moreLoading…