CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- pexip infinityPexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can...4.3 Medium
- oretnom23 online medicine ordering systemSourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion...9.1 Critical
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +16 more +18 moreFreeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force8.1 High
- bosscmsBOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name=...5.4 Medium
- emlogEmlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used...6.5 Medium
- seacmsSeaCMS 12.9 has a file deletion vulnerability via admin_template.php.9.1 Critical
- freeipa, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreFreeipa: delegation rules allow a proxy service to impersonate any user to access another target service8.8 High
- finalwire aida64 business, aida64 engineer, aida64 network audit +1 more +3 moreAn issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit v.7...7.8 High
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting ...5.4 Medium
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor...6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreInsufficient Access Control in lunary-ai/lunary5.7 Medium
- php, fedoraproject fedora +1 moreArgument Injection in PHP-CGI9.8 Critical
- opmc woocommerce dropshippingWordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability5.3 Medium
- websupporter filter custom fields & taxonomies light, websupporter filter custom fields \& taxonomies light project filter custom fields \& taxonomies light +1 moreWordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - Broken Access Control vulnerability4.3 Medium
- php, fedoraproject fedora +1 moreCommand injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)7.7 High
- adfoxly, adfoxly – ad manager, adsense ads & ads.txt +1 moreWordPress AdFoxly plugin <= 1.8.5 - Broken Access Control vulnerability5.3 Medium
- softlab upload fields for wpformsWordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerability5.3 Medium
- 83pixel simple cod fees for woocommerceWordPress Simple COD Fees for WooCommerce plugin <= 2.0.2 - Broken Access Control vulnerability5.4 Medium
- php, fedoraproject fedora +1 moreFilter bypass in filter_var (FILTER_VALIDATE_URL)5.3 Medium
- metagauss eventprimeWordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerability8.2 High
- omardabbas products, order & customers export for woocommerce, wpfactory products\, order \& customers export for woocommerce +1 moreWordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability5.3 Medium
- zorem advanced local pickup for woocommerceWordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability7.5 High
- wpdeveloper embedpressWordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability6.5 Medium
- multivendorx, multivendorx wc marketplace +1 moreWordPress MultiVendorX Marketplace <= 4.1.3 - Broken Access Control vulnerability7.1 High
- appscreo easy social share buttonsWordPress Easy Social Share Buttons plugin <= 9.4 - Multiple Broken Access Control vulnerability6.3 Medium
- data443 tracking code managerWordPress Tracking Code Manager plugin <= 2.1.0 - Broken Access Control vulnerability4.3 Medium
- awp classifieds team classifieds, strategy11 awp classifieds +1 moreWordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability4.3 Medium
- email subscribers & newsletters, icegram email subscribers \& newsletters +1 moreWordPress Icegram Express plugin <= 5.7.13 - Broken Access Control vulnerability5.3 Medium
- premmerce product filter for woocommerceWordPress Premmerce Product Filter for WooCommerce plugin <= 3.7.2 - Broken Access Control vulnerability4.3 Medium
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.24 - Broken Access Control vulnerability4.3 Medium
- repute info systems arformsWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability7.7 High
- alex volkov wp accessibility helper (wah), wp accessibility helper +1 moreWordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability4.3 Medium
- repute info systems arformsWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability7.1 High
- repute info systems arformsWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability7.1 High
- autowriter ai post generator | autowriter, ai post generator \| autowriter +1 moreWordPress AI Post Generator | AutoWriter plugin <= 3.3 - Broken Access Control vulnerability5.4 Medium
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability4.3 Medium
- olive themes one click demo import, olivethemes olive one click demo import +1 moreWordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerability7.5 High
- 5 stars rating funnel project stars rating funnel, saleswonder team: tobias 5 stars rating funnel +1 moreWordPress 5 Stars Rating Funnel plugin 1.2.67 - Broken Access Control vulnerability5.3 Medium
- rometheme romethemeform for elementorWordPress RomethemeForm For Elementor plugin <= 1.1.2 - Broken Access Control vulnerability5.3 Medium
- bizswoop bizprintWordPress BizPrint plugin <= 4.3.39 - Broken Access Control vulnerability7.5 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerability8.5 High
- avirtum vision interactiveWordPress Vision – Image Map Builder plugin <= 1.7.1 - Broken Access Control vulnerability5.3 Medium
- wpcreativeidea advanced testimonial carousel for elementorWordPress Advanced Testimonial Carousel for Elementor plugin <= 3.0.0 - Broken Access Control vulnerability4.3 Medium
- cookiehubWordPress CookieHub plugin <= 1.1.0 - Broken Access Control vulnerability4.3 Medium
- ays-pro secure copy content protection and content lockingWordPress Secure Copy Content Protection and Content Locking plugin <= 3.7.1 - Broken Access Control vulnerability4.3 Medium
- incsub hummingbirdWordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability4.3 Medium
- martin gibson wp linkedin auto publishWordPress WP LinkedIn Auto Publish plugin <= 8.11 - Broken Access Control vulnerability5.4 Medium
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability7.5 High
- merv barrett easy property listingsWordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerability5.3 Medium
- martin gibson wp gotowebinarWordPress WP GoToWebinar plugin <= 14.46 - Broken Access Control vulnerability4.3 Medium
- Show moreLoading…