CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- jkev record management systemSourceCodester Record Management System sort1.php cross site scripting5.3 Medium
- angeljudesuarez tailoring management systemitsourcecode Tailoring Management System sms.php sql injection5.3 Medium
opensslcrates.ioopenssl's `MemBio::get_buf` has undefined behavior with empty buffers6.9 Medium- angeljudesuarez university management systemitsourcecode University Management System sql injection5.3 Medium
- oretnom23 simple online book store system, simple online book store system project online book store system +1 moreSourceCodester Simple Online Book Store System admin_delete.php sql injection5.3 Medium
- guardrailsai guardrailsXXE in Guardrails AI when consuming RAIL documents5.9 Medium
- No product listedPrain HTTP POST Request ?import code injection5.3 Medium
- gargaj wuhuGargaj wuhu path traversal5.3 Medium
- mvnrepository h2o-coreH2O deserializes ML models without filtering, potentially allowing execution of malicious code7.5 High
- gargaj wuhuGargaj wuhu Slide Editor slideeditor.php unrestricted upload5.3 Medium
- flute cms, flute-cms flute +1 moreFlute CMS Notification ContentParser.php replaceContent code injection5.1 Medium
- flute cms, flute-cms flute +1 moreFlute CMS list code injection5.1 Medium
- flute cms, flute-cms flute +1 moreFlute CMS Avatar Upload Page ImagesController.php unrestricted upload5.3 Medium
- wpdirectorykit wp directory kitWordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- crmebZhongBangKeJi CRMEB PublicController.php get_image_base64 deserialization5.3 Medium
- helloassoWordPress HelloAsso plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- oceanwp ocean extraWordPress Ocean Extra plugin <= 2.2.9 - Authenticated Cross Site Scripting (XSS) vulnerability6.5 Medium
- gutenberg team gutenbergWordPress Gutenberg plugin <= 18.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- mediavine create, create by mediavine +1 moreWordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- beaver builder builder, fastlinemedia beaver builder +1 moreWordPress Beaver Builder plugin <= 2.8.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- arraytics eventinWordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- d-link dsl-225, dsl-225 firmware +1 moreD-Link - CWE-294: Authentication Bypass by Capture-replay9.8 Critical
- makecommerce for woocommerce, maksekeskus as makecommerce for woocommerce +1 moreWordPress MakeCommerce for WooCommerce plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- basix nex-forms – ultimate form builder, basixonline nex-forms +1 moreWordPress NEX-Forms – Ultimate Form Builder plugin <= 8.5.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- d-link dsl-225, dlink dsl-225 firmware +1 moreD-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel9.8 Critical
- artistscope copysafe web protectionWordPress CopySafe Web Protection plugin <= 3.14 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- optemiz xplainer - woocommerce product faqWordPress XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability5.8 Medium
- leap13 premium blocks – gutenberg blocks for wordpress, premium blocks for gutenburg +1 moreWordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- commugen sox 365Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.1 Medium
- zww zbenchWordPress zBench theme <= 1.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dario curasì cc & bcc for woocommerce order emails, dcurasi cc \& bcc for woocommerce order emails +1 moreWordPress CC & BCC for Woocommerce Order Emails plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- unitronics vision plc, visilogic +1 moreUnitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions6.5 Medium
- amp-mode login logo editorWordPress Login Logo Editor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- unitronics vision plcUnitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function6.5 Medium
- web357 easy custom code (less/css/js) – live editing, easy custom code +1 moreWordPress Easy Custom Code (LESS/CSS/JS) Plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- uusweb ws contact formWordPress WS Contact Form plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bibleserver link to bibleWordPress Link To Bible plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- celloexpressions floating social media linksWordPress Floating Social Media Links plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- meks easy ads widget, mekshq meks easy ads widget +1 moreWordPress Meks Easy Ads Widget plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pdfcrowd save as pdf plugin by pdfcrowd, save as pdf +1 moreWordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- crmebZhongBangKeJi CRMEB CopyTaobaoServices.php downloadImage deserialization5.3 Medium
- envato template kit – export, template kit - export +1 moreWordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- perials simple social shareWordPress Simple Social Share plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- inisev social media & share icons, social media share buttons \& social sharing icons +1 moreWordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- seedprod wordpress notification barWordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- soham web solution wp cookie law infoWordPress WP Cookie Law Info plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- nazmul hossain nihal wpfaviconWordPress WPFavicon plugin <= 2.1.1 - Cross-Site Scripting (XSS) vulnerability5.9 Medium
- echenley counterpointWordPress counterpoint theme <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- thinksaasThinkSAAS Admin Panel Security Center anti.php cross site scripting5.3 Medium
- thinksaasThinkSAAS do.php cross site scripting5.3 Medium
- Show moreLoading…