CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- techeshta post layouts for gutenbergWordPress Post Layouts for Gutenberg plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ithemelandco woocommerce reportWordPress WooCommerce Report plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- amans2k slingblocks – gutenberg blocks by funnelkit (formerly woofunnels)WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- subscriptionpro wp announcementWordPress WP Announcement plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pluginic fancypost – best ultimate post block, post grid, layouts, carousel, slider for gutenberg & elementorWordPress FancyPost plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wowdevs sky addons for elementorWordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpweb woocommerce - social login, woocommerce social login +1 moreWooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation9.8 Critical
- wpweb woocommerce - social login, woocommerce social login +1 moreWooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass7.3 High
- garrett grimm simple popupWordPress Simple Popup plugin <= 4.4 - Cross-Site Scripting (XSS) vulnerability5.9 Medium
- wpweb woocommerce - social login, wpwebelite woocommerce social login, yithemes yith woocommerce social login +2 moreWooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password7.3 High
- moloniWordPress Moloni plugin <= 4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- zoho crm lead magnet, zohocrm zoho crm lead magnet +1 moreWordPress Zoho CRM Lead Magnet plugin <= 1.7.8.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- ali rahimi goftinoWordPress Goftino plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- skt themes skill bar, sonalsinha21 skt skill bar +1 moreWordPress SKT Skill Bar plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- xylus themes wp event aggregatorWordPress WP Event Aggregator plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- element invader elementinvader addons for elementor, elementinvader addons for elementor +1 moreWordPress ElementInvader Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jewel theme master addons for elementor, master-addons master addons +1 moreWordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- qode qi blocksWordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus plugin <= 8.8.02.002 - Authenticated Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- clicklabs® medienagentur download button for elementorWordPress Download Button for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- spider-themes eazydocsWordPress EazyDocs plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pickplugins job board managerWordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webstix admin dashboard rss feedWordPress Admin Dashboard RSS Feed plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- marian kadanka change from emailWordPress Change From Email plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- famethemes onepressWordPress OnePress theme <= 2.3.8 - Cross Site Scripting (XSS) vulnerability5.1 Medium
- noor-e-alam amazing hover effectsWordPress Amazing Hover Effects plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- digontoahsan advanced post sliderWordPress Advanced post slider plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- typebotWordPress Typebot plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bannersky bsk pdf managerWordPress BSK PDF Manager plugin <= 3.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wapppress team wapppressWordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update5.3 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update4.3 Medium
- smub wp mail smtp by wpforms – the most popular smtp and email log pluginWP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure2.7 Low
- claudiosanches mercado pago payments for woocommerceMercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download6.5 Medium
- parisneo lollms, parisneo/lollms +1 morePath Traversal in parisneo/lollms7.3 High
- addonify – quick view for woocommerceAddonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure5.3 Medium
- ghuger easy testimonialsEasy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- jules colle conditional fields for contact form 7Conditional Fields for Contact Form 7 <= 2.4.13 - Cross-Site Request Forgery to Plugin Setting Reset4.3 Medium
libfmMageia,libfm-qtMageia +1 moreUpdated libfm & libfm-qt packages fix security vulnerabilityNo scorejflexOSS-FuzzSecurity exception in jflex.core.NFA.insertNFANo score- bazarrAn issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers...8.2 High
- hyland alfresco content servicesA reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96...6.1 Medium
- woodpecker-ci woodpeckerCustom environment variables allow to alter execution flow of plugins in Woodpecker7.5 High
- woodpecker-ci woodpeckerCustom workspace allow to overwrite plugin entrypoint executable in Woodpecker8.8 High
- havenweb havenRemote code execution in Haven IndieAuthClient (GHSL-2024-093)8.4 High
- arpsyndicate punciaPuncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`6.3 Medium
- hp inc. display controlPotential vulnerabilities have been identified in the HP Display Control software component...6.5 Medium
- hp inc. display controlPotential vulnerabilities have been identified in the HP Display Control software component...6.5 Medium
- yugabytedb anywhereAdmin Can Escalate Privileges to SuperAdmin Using Manual PUT Request6.0 Medium
- Show moreLoading…