CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- andrewabarber wordpress jitsi shortcode, andrew a barber wp-jitsi-shortcodes +1 moreWordPress Jitsi Shortcode <= 0.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- andrewabarber wordpress jitsi shortcode, andrew a barber wp-jitsi-shortcodes +1 moreWordPress Jitsi Shortcode <= 0.1 - Admin+ Stored XSS4.8 Medium
- davidjmiller similaritySimilarity <= 3.0 - Stored XSS via CSRF4.3 Medium
- davidjmiller similaritySimilarity <= 3.0 - Plugin Reset via CSRF4.3 Medium
- projectcaruso pray for mePray For Me <= 1.0.4 - Unauthenticated Stored XSS6.1 Medium
- project caruso pray for mePray For Me <= 1.0.4 - Settings Update via CSRF5.4 Medium
- mnbaa alemha watermark, unknown alemha watermarker +1 moreAlemha Watermarker <= 1.3.1 - Author+ Stored XSS4.7 Medium
- luckywp table of contents, theluckywp luckywp table of contents +1 moreLuckyWP Table of Contents <= 2.1.4 - Admin+ Stored XSS4.6 Medium
- stellarwp the events calendar, unknown events-calendar-pro, theeventscalendar events calendar pro +2 moreThe Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access6.5 Medium
- wpeverest everest formsWordPress Everest Forms plugin <= 2.0.3 - Broken Access Control vulnerability5.3 Medium
- woo woocommerce warranty requests, woocommerce returns and warranty requests +1 moreWordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability6.5 Medium
- woo woocommerce warranty requests, woocommerce returns and warranty requests +1 moreWordPress WooCommerce Warranty Requests plugin <= 2.2.7 - Broken Access Control vulnerability5.3 Medium
- wpmet elementskit, elementskit pro +1 moreElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery8.5 High
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL6.4 Medium
- unknown wp staging pro wordpress backup plugin, wp-staging wp staging +1 moreWP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion7.5 High
- shahjahan jewel ninja tablesWordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability5.3 Medium
- woo woocommerce ship to multiple addresses, woocommerce shipping multiple addresses +1 moreWordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.9 - Broken Access Control vulnerability5.4 Medium
- cantoCanto <= 3.0.8 - Unauthenticated Remote File Inclusion9.8 Critical
- arraytics timetics, timetics – appointment booking & scheduling +1 moreTimetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege Escalation7.3 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 moreIncorrect Permission Assignment Privilege Escalation Vulnerability7.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreDirectory Traversal Remote Code Execution Vulnerability8.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreAuthentication Bypass Vulnerability8.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreTOCTOU vulnerability6.7 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 moreSession disclosure inside the log files4.7 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreRemote Code Execution7.2 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreRemote Code Execution7.2 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreRemote Code Execution7.2 High
- gitlabUncontrolled Resource Consumption in GitLab3.1 Low
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Local File Inclusion4.4 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreinsecure upload9.8 Critical
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)insecure upload9.8 Critical
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreRemote Code Execution9.8 Critical
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 moreInsecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 moreHardcoded credentials for WebDAV access7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLack of authentication8.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Hardcoded keys used to generate authentication cookies7.1 High
- asus download masterASUS Download Master - Arbitrary File Upload7.2 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreInsecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreInsecure permissions7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation7.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded credentials7.1 High
- asus download masterASUS Download Master - Stored XSS4.8 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Leak of admin password and passwords6.5 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreDOM-based XSS6.1 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded password used to encrypt files6.2 Medium
- david gwyer simple sitemap – create a responsive html sitemapSimple Sitemap <= 3.5.13 - Cross-Site Request Forgery via admin_notices4.3 Medium
- vberkel schema app structured dataSchema App Structured Data <= 2.2.0 - Cross-Site Request Forgery4.3 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded password used to encrypt logs and use of weak cipher6.2 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Hardcoded password used to encrypt logs6.2 Medium
- asus download masterASUS Download Master - Reflected XSS4.8 Medium
- Show moreLoading…