CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- dedecmsDedeCMS article_template_rand.php code injection5.1 Medium
- xinhu rockoaXinhu RockOA tpl_upload.html okla cross site scripting5.3 Medium
- b3log siyuanSiYuan PDF PDF.js cross site scripting5.3 Medium
- formtools form toolsformtools.org Form Tools Import Option List edit.php curl_exec file inclusion5.1 Medium
- formtools form toolsformtools.org Form Tools Setting code injection5.1 Medium
- formtools form toolsformtools.org Form Tools User Settings Page cross site scripting5.1 Medium
- formtools form toolsformtools.org Form Tools cross site scripting5.1 Medium
- limesurveyLimeSurvey Survey General Settings updatesurveylocalesettings_generalsettings actionUpdateSurveyLocaleSettingsGeneralSettings sql injection5.3 Medium
- classcmsClassCMS cross site scripting5.3 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload6.4 Medium
- jamie bergen plugin notes plusWordPress Plugin Notes Plus plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bracketspace simple post notesWordPress Simple Post Notes plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- césar martín tochat.be, tochat be be +1 moreWordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- celomitan gum elementor addonWordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpcone coneblog – wordpress blog widgetsWordPress ConeBlog plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pratik chaskar timeline module for beaver builderWordPress Timeline Module for Beaver Builder plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- contact form - repute infosystems arforms form builderWordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.10.34 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- labibahmed tabs for wpbakery page builderWordPress Tabs For WPBakery Page Builder plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yith woocommerce ajax product filter, yithemes yith woocommerce ajax product filter +1 moreWordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability5.8 Medium
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wedevs recaptcha integration for wordpressWordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- cifi seo plugin by squirrly seo, seo squirrly plugin by squirrly seo, cifi seo plugin by squirrley seo +2 moreSEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter8.8 High
- themeum tutor lmsWordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pootlepress caxton – create pro page layouts in gutenbergWordPress Caxton – Create Pro page layouts in Gutenberg plugin <= 1.30.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cyberchimps responsive mobileWordPress Responsive Mobile theme <= 1.15.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- codexhelp master popupsWordPress Master Popups plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- noor alam magical posts display – elementor & gutenberg posts blocksWordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mbe worldwide s.p.a. eshipWordPress MBE eShip plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- addix simple responsive sliderWordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- makegutenblock gutslider, zakaria binsaifullah gutslider – all in one block slider +1 moreWordPress GutSlider – All in One Block Slider plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hidekazu ishikawa vk all in one expansion unitWordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bradmax playerWordPress Bradmax Player plugin <= 1.1.27 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- meks smart author widget, mekshq meks smart author widget +1 moreWordPress Meks Smart Author Widget plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- atlas public policy power bi embedded for wordpress, atlaspolicy power bi embedded +1 moreWordPress Power BI Embedded for WordPress plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- chris coyier codepen embedded pens shortcodeWordPress CodePen Embedded Pens Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- codoc.jp codocWordPress codoc plugin <= 0.9.51.12 - Cross Site Scripting (XSS) vulnerability7.1 High
- a3rev software woocommerce predictive searchWordPress Predictive Search for WooCommerce plugin <= 6.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- spwebguy team membersWordPress Team Members plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- martin gibson wp gotowebinarWordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- namithjawahar adpushWordPress AdPush plugin <= 1.50 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- obtain infotech multisite content copier/updaterWordPress Multisite Content Copier/Updater plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- skt themes addons for elementor, sktthemes skt addons for elementor +1 moreWordPress SKT Addons for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- loos,inc. arkhe blocksWordPress Arkhe Blocks plugin 2.22.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- booking ultra pro ultra pro, deetronix booking ultra pro +1 moreWordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- reviews.co.uk reviews.ioWordPress REVIEWS.io plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- calendar.online / kalender.digital, kalender.digital calendar.online / kalender.digital +1 moreWordPress Calendar.online / Kalender.digital – Plugin plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- yongki agustinus animated typed js shortcodeWordPress Animated Typed JS Shortcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- appmaker – convert woocommerce to android & ios native mobile appsWordPress Appmaker plugin <= 1.36.12 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- noor alam magical addons for elementorWordPress Magical Addons For Elementor plugin <= 1.1.41 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…