CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- longse technology lbh30fe200w, zamel zmb-01, zmb-01/c +2 moreLongse model LBH30FE200W cameras, as well as products based on this device, provide an...7.5 High
- longse technology nvr3608pge2w, zamel zmb-01 +1 moreLongse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device,...5.3 Medium
- longse technology nvr3608pge2w, zamel zmb-01 +1 moreLongse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device,...6.0 Medium
- g5plus ultimate bootstrap elements for elementorWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability8.5 High
- brainstorm force ultimate addons for elementorWordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerability8.8 High
- awsm teamWordPress AWSM Team – Team Showcase Plugin plugin <= 1.3.1 - Local File Inclusion vulnerability6.5 Medium
- ays pro photo gallery by ays, ays-pro photo gallery, photo gallery team gallery by ays +2 moreWordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerability3.8 Low
- elementor website builderWordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability5.5 Medium
- patreon wordpressWordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability5.3 Medium
- easyappointmentsA BOLA vulnerability in POST /providers in EasyAppointments < 1.5.08.5 High
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} in EasyAppointments < 1.5.09.6 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} in EasyAppointments < 1.5.09.1 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} in EasyAppointments < 1.5.0.8.5 High
- easyappointmentsA BOLA vulnerability in POST /services in EasyAppointments < 1.5.07.7 High
- easyappointmentsA BOLA vulnerability in POST /customers in EasyAppointments < 1.5.05.0 Medium
- automattic newspack blocks, newspack newsletters +1 moreWordPress Newspack Blocks plugin <= 3.0.8 - Arbitrary File Upload vulnerability9.9 Critical
- easyappointmentsA BOLA vulnerability in POST /secretaries in EasyAppointments < 1.5.07.7 High
- wpzita zita elementor site libraryWordPress Zita Elementor Site Library plugin <= 1.6.1 - Arbitrary Code Execution vulnerability9.9 Critical
- easyappointmentsA BOLA vulnerability in POST /admins in EasyAppointments < 1.5.09.9 Critical
- codeless cowidgets, cowidgets – elementor addons, cowidgets - elementor +2 moreWordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Local File Inclusion vulnerability7.5 High
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability9.9 Critical
- ideabox creations powerpack lite for beaver builder, ideabox powerpack for beaver builder +1 moreWordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability4.9 Medium
- kaptinlin strikingWordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability8.5 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability4.9 Medium
- wpdirectorykit wp directory kitWordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability2.7 Low
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability7.5 High
- automattic woocommerceWordPress WooCommerce plugin <= 8.9.2 - Content Injection vulnerability3.5 Low
cipherbcryptPyPIMalicious package. Exfiltrated secrets to a target server.No score- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morebonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()7.1 High
- easyappointmentsA BOLA vulnerability in POST /appointments in EasyAppointments < 1.5.07.7 High
- stylemixthemes consulting elementor widgets, masterstudy elementor widgets +1 moreSQL Injection vulnerability in multiple StylemixThemes premium themes8.5 High
- membership software wishlist member x, wishlist member member +1 moreWordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability10.0 Critical
- zoho marketing automationWordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability8.5 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability7.6 High
- paid memberships pro memberships pro, strangerstudios paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability7.6 High
- kainelabs youzifyWordPress Youzify plugin <= 1.2.5 - SQL Injection vulnerability8.5 High
- wpweb woocommerce social loginWordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability5.4 Medium
- studiopress genesis blocksGenesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes6.4 Medium
- genetech products registration forms, user registration forms, content registration +3 more +5 morePie Register - Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation8.8 High
- happydevs happy woocommerce faqs – ultimate product faq pluginXPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- hyumika openstreetmap, mika osm – openstreetmap, osm-openstreetmap +2 moreOSM – OpenStreetMap <= 6.0.3 - Authenticated (Contributor+) SQL Injection9.9 Critical
- cliengo – chatbot, cliengo-chatbot +1 moreCliengo - Chatbot <= 3.0.2 - Missing Authorization to Unauthenticated Chatbot Settings Update6.5 Medium
- elfsight pricing tablePricing Table <= 2.0.1 - Missing Authorization5.4 Medium
- aprokopenko just custom fieldsJust Custom Fields <= 3.3.2 - Cross-Site Request Forgery via AJAX actions4.3 Medium
- Show moreLoading…