CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- booster for woocommerce, pluggabl llc booster plus for woocommerce +1 moreWordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability6.5 Medium
- awesome support team support, awesomesupport awesome support, awesome support wordpress helpdesk \& support +2 moreWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability5.3 Medium
- typps calendarista, calendarista basic edition +1 moreWordPress Calendarista Basic Edition plugin <= 3.0.5 - Broken Access Control vulnerability6.5 Medium
- wpclever wpc badge management for woocommerceWordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerability4.3 Medium
- delucks seoWordPress DELUCKS SEO plugin <= 2.5.4 - Broken Access Control vulnerability5.3 Medium
- mr.ebabi new order notification for woocommerceWordPress New Order Notification for Woocommerce plugin <= 2.0.2 - Broken Access Control vulnerability7.1 High
- wpxpo postxWordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability5.4 Medium
- androidbubble wp sort orderWordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerability4.3 Medium
- itsourcecode vehicle management system, sourcecodester vehicle service management system +1 moreSourceCodester Vehicle Management System updatebill.php sql injection6.9 Medium
- sourcecodester stock management systemSourceCodester Stock Management System Login index.php sql injection6.9 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway deletemacbind.php sql injection5.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection5.3 Medium
- mitel 6869i sip firmware, rev00 6868i , rev03 6869i +2 moreOn Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform...8.8 High
- mitel 6869i firmware, 6869i sip firmware +1 moreAn issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A...8.8 High
- authlibAuthlib has algorithm confusion with asymmetric public keys7.5 High
vteDebian,vte2.91Debian,vte291Azure Linux +2 moreGNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via...4.4 Medium- labvantage limsLabVantage LIMS POST Request sql injection5.3 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIncorrect Authorization in lunary-ai/lunary9.8 Critical
- zenml, zenml-io zenml-io/zenml +1 moreInsufficient Session Expiration in zenml-io/zenml3.9 Low
- carazo import and export users and customersWordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability5.3 Medium
- icegram, icegram express +1 moreWordPress Icegram Engage plugin <= 3.1.21 - Broken Access Control vulnerability4.3 Medium
- plechev andrey wp-recallWordPress WP-Recall plugin <= 16.26.6 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- iqonic kivicareWordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- advanced-woo-labels advanced woo labelsWordPress Advanced Woo Labels plugin <= 1.93 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp-ecommerce recurring paypal donationsWordPress Recurring PayPal Donations plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bestwebsoft contact form to db by bestwebsoft, contact form to db +1 moreWordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability8.5 High
- hcl software connections docsHCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)4.4 Medium
- givewpWordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gvectors wpdiscuzWordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themeisle otter blocks pro, otter blocks +1 moreWordPress Otter Blocks PRO plugin <= 2.6.11 - Authenticated Sensitive Data Exposure vulnerability4.3 Medium
- 10up elasticpressWordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- automattic sensei pro (wc paid courses), sensei pro (wc paid courses) +1 moreWordPress Sensei Pro (WC Paid Courses) plugin <= 4.23.1.1.23.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability7.1 High
- jewel theme master addons for elementor, master-addons master addons +1 moreWordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- adnan analytify, analytify - google analytics dashboard +1 moreWordPress Analytify plugin <= 5.2.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- marketing fire, llc widget options - extendedWordPress Widget Options - Extended plugin <= 5.1.0 - Multiple Data Exposure Vulnerability6.5 Medium
- aa web servant 12 step meeting listWordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability7.1 High
- amauri wpmobile.appWordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability7.1 High
- fahad mahmood wp docsWordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- thimpress edumaWordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- yith woocommerce tab manager, yithemes yith woocommerce tab manager +1 moreWordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- hasthemes ht feed, ht plugins feed +1 moreWordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- property hive propertyhiveWordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jewel theme master addons for elementor, master-addons master addons +1 moreWordPress Master Addons for Elementor plugin <= 2.0.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shaonsina sina extension for elementorWordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpblockart blockart blocksWordPress BlockArt Blocks plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ciprian popescu block for font awesomeWordPress Block for Font Awesome plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- heateor social login, team heateor heateor social login +1 moreWordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability7.1 High
- heateor social login, team heateor heateor social login +1 moreWordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…