CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- brainstorm force pre-publish checklistWordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability5.4 Medium
- posimyth nexterWordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability7.6 High
- themify ultraWordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability8.3 High
- themify ultraWordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability8.8 High
- muffin group bethemeWordPress BeTheme theme <= 27.1.1 - Contributor+ Broken Access Control vulnerability7.6 High
- quadlayers checkout manager, woocommerce checkout manager +1 moreWordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability6.5 Medium
- themepunch essential gridWordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability8.3 High
- thrive themes theme builderWordPress Thrive Theme Builder theme < 3.24.0 - Multiple Authenticated Broken Access Control vulnerability8.3 High
- automattic jetpackWordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability4.3 Medium
- crocoblock jetelements, jetelements for elementor +1 moreWordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability7.5 High
- crocoblock jetelements, jetelements for elementor +1 moreWordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability8.2 High
- crocoblock jetelements, jetelements for elementor +1 moreWordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability6.3 Medium
- wpsoul greenshift, greenshift – animation and page builder blocks +1 moreWordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- live composer team page builder: live composer, page builder live composer +1 moreWordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ PHP Object Injection vulnerability8.5 High
- averta master sliderWordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- paradox security systems (bahamas) ltd. ip150 internet moduleParadox IP150 Internet Module Cross-Site Request Forgery6.8 Medium
- cartflows funnel builder, brainstormforce cartflows – funnel builder & checkout plugin for woocommerce +1 moreWooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- jeffparker yarpp – yet another related posts plugin, yarpp yet another related posts plugin +1 moreYARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting4.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'6.4 Medium
- florent maillefaud wp maintenance, wp maintenance project maintenance +1 moreWP Maintenance <= 6.1.9.2 - IP Spoofing to Maintenance Mode Bypass5.3 Medium
- strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptions, paid memberships pro +1 morePaid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification5.4 Medium
- robosoft robo gallery – photo & image sliderPhoto Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title6.4 Medium
- ricoh company, ltd. streamline nx pc clientUse of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this...4.0 Medium
- ricoh streamline nx pc clientUse of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this...9.8 Critical
- cve-2024-36480 ricoh streamline nx pc client, ricoh streamline nx pc client +1 moreUse of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier...9.8 Critical
- ricoh company, ltd streamline nx pc clientImproper restriction of communication channel to intended endpoints issue exists in Ricoh...6.3 Medium
- eg secure solutions inc. siteguard wp plugin, eg secure solutions siteguard +1 moreSiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php...5.3 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: sched: sch_multiq: fix possible OOB write in multiq_tune()7.8 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreUncontrolled Resource Consumption in mintplex-labs/anything-llm6.5 Medium
- raajtram pexels, pexels: free stock photos +1 morePexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload8.8 High
- sirv image optimizer, resizer and cdn – sirv, sirv, sirv image optimizer\, resizer and cdn +2 moreImage Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload9.9 Critical
- codevibrant wp magazine modules lite, wp-magazine-modules +1 moreWP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion7.5 High
- ultimateblocks ultimate blocks – 25+ gutenberg blocks for block editorUltimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox6.4 Medium
- robosoft robo gallery – photo & image sliderPhoto Gallery, Images, Slider in Rbs Image Gallery <= 3.2.19 - Cross-Site Request Forgery to Post Creation and Limited Data Loss8.8 High
- zozo, inc. 'zozotown' app for androidImproper authorization in handler for custom URL scheme issue in 'ZOZOTOWN' App for Android...4.3 Medium
- salonbookingsystem salon booking system, wordpresschef salon booking system – free version +1 moreSalon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload9.8 Critical
- surakrai mimo woocommerce order trackingMIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- auburnforest blogmentor – blog layouts for elementorBlogmentor – Blog Layouts for Elementor <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagination_style Parameter6.4 Medium
- ali2woo aliexpress dropshipping with alinext, aliexpress dropshipping plugin for woocommerce & wordpress +1 moreAliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- webhuntinfotech photo video gallery masterPhoto Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection8.8 High
- webhuntinfotech universal sliderUniversal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection5.4 Medium
- aspengrovestudios replace imageReplace Image <= 1.1.10 - Insecure Direct Object Reference4.3 Medium
- embedsocial – social media feeds, reviews and galleriesEmbedSocial – Social Media Feeds, Reviews and Galleries <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- garbowza osm map widget for elementorOSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- viitorcloudvc custom product list tableCustom Product List Table <= 3.0.0 - Cross-Site Request Forgery4.3 Medium
- nimble3 wordpress picture / portfolio / media gallery, wordpress picture\/portfolio\/media gallery +1 moreWordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery9.3 Critical
- stylemixthemes cost calculator builder proCost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email Sending5.8 Medium
- ali2woo aliexpress dropshipping with alinext, aliexpress dropshipping plugin for woocommerce & wordpress +1 moreAliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions6.3 Medium
- glboy otp login with phone number, otp verificationLogin with phone number <= 1.7.34 - Insecure Password Reset Mechanism8.1 High
spirv-toolsOSS-FuzzHeap-buffer-overflow in spvtools::disassemble::InstructionDisassembler::EmitInstructionNo score- Show moreLoading…