CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- dynamicweblab wordpress team managerWordPress Team Manager plugin <= 2.1.12 - Local File Inclusion vulnerability6.5 Medium
- pluginus wordpress currency switcher, realmag777 wpcs +1 moreWordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability6.5 Medium
- anhvnit woocommerce openposWordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Arbitrary File Deletion vulnerability8.6 High
- nootheme jobmonsterWordPress Jobmonster theme <= 4.7.0 - Unauthenticated Arbitrary File Deletion vulnerability8.6 High
- nootheme jobmonsterWordPress Jobmonster theme <= 4.7.5 - Unauthenticated Privilege Escalation vulnerability9.8 Critical
- iqbalrony wp user switchWordPress WP User Switch plugin <= 1.1.0 - Privilege Escalation vulnerability8.0 High
- openclarity kubeclaritySQL Injection in the KubeClarity REST API6.5 Medium
fdo-clientSUSESecurity update for fdo-clientNo score- mythemeshop sociallyviralWordPress SociallyViral theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- volthemes patricia liteWordPress Patricia Lite theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- seraphinite solutions accelerator (full, premium)WordPress Seraphinite Accelerator (Full, premium) plugin <= 2.21.13 - CSRF Leading to Arbitrary File Deletion vulnerability7.4 High
- davidanderson internal link juicer: seo auto linker for wordpress, internal link juicer link juicer: seo auto linker for wordpress +1 moreWordPress Internal Link Juicer: SEO Auto Linker for WordPress plugin <= 2.24.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpjohnny, zeroneit comment reply emailWordPress Comment Reply Email plugin <= 1.3 - CSRF to Stored XSS vulnerability7.1 High
- binarycarpenter ultimate custom add to cart button (ajax) for woocommerce by binary carpenterWordPress Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter plugin <= 1.222.17 - Broken Access Control to XSS vulnerability6.5 Medium
- ali2woo alinextWordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability7.1 High
- saleswonder team: tobias get better reviews for woocommerceWordPress Get Better Reviews for WooCommerce plugin <= 4.0.6 - Broken Access Control vulnerability4.3 Medium
- payplus ltd payment gateway, unknown payplus payment gateway +1 moreWordPress PayPlus Payment Gateway plugin <= 7.0.7 - SQL Injection vulnerability8.5 High
- anhvnit woocommerce openposWordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated SQL Injection vulnerability9.3 Critical
cni-pluginsSUSESecurity update for cni-pluginsNo scorecniSUSESecurity update for cniNo score- wpvibes form vibes, form vibes – database manager for forms +1 moreForm Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data8.8 High
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.36 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget6.4 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetrom: Fix a memory leak in nr_heartbeat_expiry()5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetpoll: Fix race condition in netpoll_owner_active4.7 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moretracing: Build event generation tests only as modules5.5 Medium
- linux, linux kernel +1 morebpf: Fix reg_set_min_max corruption of fake_reg7.8 High
- linux, linux kernel +1 morecrypto: hisilicon/sec - Fix memory leak for sec resource release5.5 Medium
- linux, linux kernel +1 moreio_uring/sqpoll: work around a potential audit memory leak5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreblock/ioctl: prefer different overflow check7.8 High
- linux, linux kernel +1 morenet: ena: Add validation for completion descriptors consistency9.8 Critical
- linux, linux kernel +1 moreext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()5.5 Medium
- linux, linux kernel +1 morecpufreq: amd-pstate: fix memory leak on CPU EPP exit5.5 Medium
- linux, linux kernel +1 morebpf: Avoid splat in pskb_pull_reason7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()5.5 Medium
- linux, linux kernel +1 moreptp: fix integer overflow in max_vclocks_store7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: ipset: Fix suspicious rcu_dereference_protected()5.5 Medium
- linux, linux kernel +1 moreRDMA/rxe: Fix responder length checking for UD request packets7.5 High
- linux, linux kernel +1 moredmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()7.8 High
- linux, linux kernel +1 moreRDMA/mlx5: Add check for srq max_sge attribute7.8 High
- linux, linux kernel +1 moreKVM: arm64: Disassociate vcpus from redistributor region on teardown7.8 High
- linux, linux kernel +1 moredrm/radeon: fix UBSAN warning in kv_dpm.c5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: fix UBSAN warning in kv_dpm.c5.5 Medium
- linux, linux kernel +1 moredmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr()7.8 High
- linux, linux kernel +1 morenet/tcp_ao: Don't leak ao_info on error-path5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."7.8 High
- linux, linux kernel +1 moretipc: force a dst refcount before doing decryption9.8 Critical
- linux, linux kernel +1 morebatman-adv: bypass empty buckets in batadv_purge_orig_ref()5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moredrop_monitor: replace spin_lock by raw_spin_lock7.5 High
- linux, linux kernel +1 morewifi: ath12k: fix kernel crash during resume7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: qedi: Fix crash while reading debugfs attribute7.1 High
- Show moreLoading…