CVEs published in June 2024
3,276 vulnerabilities, 312 critical, 13 exploited.
- back2nature word balloonWordPress Word Balloon plugin <= 4.21.1 - Local File Inclusion vulnerability6.5 Medium
- john west slideshow se, slideshow se project se +1 moreWordPress Slideshow SE plugin <= 2.5.17 - Auth. Limited Local File Inclusion vulnerability6.5 Medium
- bogdan bendziukov squeezeWordPress Squeeze plugin <= 1.4 - Arbitrary File Upload vulnerability9.1 Critical
- artbees jupiter x core, jupiterx core +1 moreWordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability9.8 Critical
- solidwp solid securityWordPress Solid Security plugin <= 9.3.1 - IP Spoofing Leading to Denial of Service vulnerability3.7 Low
- wp 2faWordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability4.3 Medium
- adminer, adminerevo +1 moreAdminer and AdminerEvo vulnerable to directory traversal and file upload9.2 Critical
- uncanny owl automator pro, uncannyowl uncanny automator +1 moreWordPress Uncanny Automator Pro plugin <= 5.3 - Cross Site Request Forgery (CSRF) Leading to License Settings Reset vulnerability5.4 Medium
- blazethemes digital newspaperWordPress Digital Newspaper theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ali2woo, ali2woo lite, aliexpress dropshipping with alinext +1 more +3 moreWordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability8.3 High
- tribulant newslettersWordPress Newsletters plugin <= 4.9.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rara theme book landing pageWordPress Book Landing Page theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpdeveloper embedpressWordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability4.3 Medium
- gutenbergforms gutenberg forms, nikolay strikhar wordpress form builder plugin – gutenberg forms +1 moreWordPress Gutenberg Forms plugin <= 2.2.8.3 - Auth. Broken Access Control vulnerability6.5 Medium
- parallels desktopImproper privilege management vulnerability in Parallels Desktop7.7 High
- bill minozzi wp toolsWordPress WP Tools plugin <= 3.41 - Auth. Broken Access Control vulnerability8.8 High
- dave kiss vimeography: vimeo video gallery wordpress plugin, davekiss vimeography +1 moreWordPress Vimeography plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- presscustomizr customizrWordPress Customizr theme <= 4.4.21 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- presscustomizr huemanWordPress Hueman theme <= 3.7.24 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- exeebit phpinfo() wp, phpinfo-wp, phpinfo\(\) wp +2 moreWordPress phpinfo() WP plugin <= 5.0 - Unauthenticated Data Exposure vulnerability5.3 Medium
- a wp life event management tickets booking, awplife event monster +1 moreWordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability5.3 Medium
- 5 star plugins easy age verifyWordPress Easy Age Verify plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- theme horse interfaceWordPress Interface theme <= 3.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cryout creations serious sliderWordPress Serious Slider plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- theme freesia excellentWordPress Excellent theme <= 1.2.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ollybach wppizzaWordPress WPPizza – A Restaurant Plugin plugin <= 3.18.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- live composer team page builder: live composer, blueastral page builder\ +1 moreWordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- john west slideshow se, slideshow se project se +1 moreWordPress Slideshow SE plugin <= 2.5.17 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- darteweb dimage 360WordPress DImage 360 plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- live composer team page builder: live composer, blueastral page builder\ +1 moreWordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ Shortcode Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpdeveloper typing textWordPress Typing Text plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- linux, linux kernel +1 moretracing/probes: fix error check in parse_btf_field()5.5 Medium
- linux, linux kernel +1 moretpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreSUNRPC: Fix loop termination condition in gss_free_in_token_pages()9.8 Critical
- linux, linux kernel +1 moredma-mapping: benchmark: fix node id validation7.1 High
- linux, linux kernel +1 moredma-mapping: benchmark: handle NUMA_NO_NODE correctly7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moredma-buf/sw-sync: don't enable IRQ from sync_print_obj()5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morebpf: Allow delete from sockmap/sockhash only if update is allowed4.7 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreenic: Validate length of nl attributes in enic_set_vf_port7.3 High
- abb 800xa base, 800xa base system +1 moreCommunication DoS vulnerability6.9 Medium
- linux, linux kernel +1 moregreybus: lights: check return of get_channel_from_mode5.5 Medium
- linux, linux kernel +1 moref2fs: multidev: fix to recognize valid zero block address5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresoundwire: cadence: fix invalid PDI offset7.8 High
- linux, linux kernel +1 moreserial: max3100: Lock port->lock when calling uart_handle_cts_change()5.5 Medium
- linux, linux kernel +1 moreserial: max3100: Update uart_driver_registered on driver removal5.5 Medium
- Show moreLoading…