CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- takashi matsuyama my favoritesWordPress My Favorites plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sinatraWordPress Sinatra theme <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- uncanny owl automator pro, uncannyowl uncanny automator +1 moreWordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- billy bryant tabs, oxilab responsive tabs +1 moreWordPress Tabs plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- biplob018 shortcode addonsWordPress Shortcode Addons plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- biplob adhikari accordionsWordPress Accordions plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- kriesi enfoldWordPress Enfold theme <= 5.6.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- romik84 demo awesomeWordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ali2woo aliexpress dropshipping with alinext, ali2woo team lite, dropshipping guru ali2woo lite +2 moreWordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- creativeinteractivemedia transition slider – responsive image slider and gallery, transition slider +1 moreWordPress Transition Slider – Responsive Image Slider and Gallery plugin <= 2.20.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- generatewp sketchfab embedWordPress Sketchfab Embed plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- prowcplugins empty cart button for woocommerceWordPress Empty Cart Button for WooCommerce plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- apache rocketmqApache RocketMQ: Unauthorized Exposure of Sensitive Data8.8 High
- pagebuildersandwich page builder sandwich, pbn hosting sl page builder sandwich – front-end page builder +1 moreWordPress Page Builder Sandwich plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kimili flash embed, michael bester kimili flash embed +1 moreWordPress Kimili Flash Embed plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicdark restaurant reservations, nicdarkthemes restaurant food +1 moreWordPress Restaurant Reservations plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- auburnforest blogmentor, blogmentor – blog layouts for elementor +1 moreWordPress Blogmentor – Blog Layouts for Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpmu dev brandaWordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ninja team beaver add-ons for beaver builder, ninjabeaveraddon ninja beaver add-ons for beaver builder +1 moreWordPress Ninja Beaver Add-ons for Beaver Builder plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- vsourz all in one redirectionWordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- gallery slideshow project slideshow, jethin gallery slideshow +1 moreWordPress Gallery Slideshow plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 moreWordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- social rocket rocket, wpsocialrocket social rocket +1 moreWordPress Social Rocket plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wp extended the ultimate wordpress toolkit – wp extended, wpextended wp extended +1 moreWordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- unknown wp-lister lite for amazon, wp lab lister lite for amazon +1 moreWordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar plugin <= 4.4.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themelooks enter addonsWordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- adrian tobey groundhoggWordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- martin gibson ideapushWordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kaptinlin strikingWordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- michael nelson print my blog, print my blog project my blog +1 moreWordPress Print My Blog plugin <= 3.27.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- nextscripts, nextscripts social networks auto poster +1 moreWordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- brainstormforce cards for beaver builderWordPress Cards for Beaver Builder plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ideabox creations powerpack lite for beaver builder, ideabox powerpack for beaver builder +1 moreWordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- averta depicter slider, depicter +1 moreWordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- emilia progress planner, progress planner planner +1 moreWordPress Progress Planner plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themesgrove all-in-one addons for elementor, widgetkit +1 moreWordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hamid alinia login with phone numberWordPress Login with phone number plugin <= 1.7.35 - Admin+ Cross Site Scripting (XSS) vulnerability5.9 Medium
- themegrill esteemWordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- everpress mailsterWordPress Mailster plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- atarimWordPress Atarim plugin <= 3.31 - Authenticated Cross Site Scripting (XSS) vulnerability5.9 Medium
- uncanny owl toolkit pro for learndashWordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- bplugins html5 audio playerWordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- community events project events, jackdewey community events +1 moreCommunity Events < 1.5 - Event Deletion via CSRF5.4 Medium
- projectzealous pz frontend managerpz-frontend-manager < 1.0.6 - CSRF change user profile picture8.8 High
- htmlforms html formsHTML Forms < 1.3.33 - Admin+ Stored XSS4.8 Medium
- masterstudy lms wordpress plugin lms wordpress plugin, stylemixthemes masterstudy lms, unknown masterstudy lms wordpress plugin +2 moreMasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor8.8 High
- holoborodko wp quicklatexWP QuickLaTeX < 3.8.8 - Admin+ Stored XSS4.8 Medium
- cminds cm popup, unknown cm popup plugin for wordpress +1 moreCM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS4.8 Medium
- Show moreLoading…