CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- voidcoders void contact form 7 widget for elementor page builderWordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- envothemes envo's elementor templates & widgets for woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 moreWordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- boldthemes bold timeline liteWordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- unknown white label cmsWordPress White Label CMS plugin <= 2.7.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cool plugins cryptocurrency widgets – price ticker & coins list, coolplugins cryptocurrency widgets +1 moreWordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System index.php file inclusion5.3 Medium
- corydolphin corydolphin/flask-cors, flask-cors +1 moreImproper Access Control in corydolphin/flask-cors6.5 Medium
- codeastro online railway reservation system, online railway reservation system project railway reservation system +1 moreCodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload5.1 Medium
- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L cstecgi.cgi setLanguageCfg stack-based overflow8.7 High
- totolink ex1200l, ex1200l firmware +1 moreTOTOLINK EX1200L cstecgi.cgi setDefResponse stack-based overflow8.7 High
- totolink x6000r, x6000r firmware +1 moreTOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection5.3 Medium
- code amp custom layouts – post + product grids made easyWordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp lab wp-lister lite for ebayWordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- codemacher structured contentWordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gutentor, gutentor - gutenberg blocks - page builder for gutenberg editor +1 moreWordPress Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp socio telegram widget and join link, wpsocio wp telegram widget and join link +1 moreWordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- formfacadeWordPress FormFacade plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- e2pdfWordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- livemesh addons for wpbakery page builderWordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pickplugins team showcaseWordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cleversoft clever addons for elementorWordPress Clever Addons for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- boone gorges invite anyoneWordPress Invite Anyone plugin <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cpothemes allegiantWordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ideabox powerpack for beaver builderWordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cyberchimps responsive blocks – wordpress gutenberg blocks, responsive blocks +1 moreWordPress Responsive Blocks – WordPress Gutenberg Blocks plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wedevs wemailWordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- automattic woocommerceWordPress WooCommerce plugin <= 9.1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- dedebizDedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted upload5.3 Medium
- orbisius child theme creatorWordPress Child Theme Creator by Orbisius plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- bdthemes ultimate store kit elementor addons, ultimate store kit +1 moreWordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) v…6.5 Medium
- icegramWordPress Icegram Engage – Ultimate WP Popup Builder, Lead Generation, Optins, and CTA plugin <= 3.1.25 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wow-company modal windowWordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- virustran button contact vrWordPress Button contact VR plugin <= 4.7.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- iznyn purity of soulWordPress Purity Of Soul theme <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- all bootstrap blocks bootstrap blocks, miles all bootstrap blocks +1 moreWordPress All Bootstrap Blocks plugin <= 1.3.19 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cryoutcreations bravadaWordPress Bravada theme <= 1.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- organic themes givingpress liteWordPress GivingPress Lite theme <= 1.8.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dedebizDedeBIZ archives_do.php AdminUpload unrestricted upload5.3 Medium
- dedebizDedeBIZ File Extension file_manage_control.php unrestricted upload5.3 Medium
- dedebizDedeBIZ File Extension media_add.php unrestricted upload5.3 Medium
simdutfOSS-FuzzHeap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf16beNo scoretrafficserverOSS-FuzzUse-of-uninitialized-value in Http3FrameFactory::createNo score- pkp ojs, public knowledge project open journal systems +1 morepkp ojs signOut redirect6.9 Medium
- scada-ltsScada-LTS Message Scada cross site scripting5.3 Medium
- tpmecmsxiaohe4966 TpMeCMS Basic Configuration config cross site scripting5.1 Medium
- innocms, innovative cms cms +1 moreInnoCMS Backend edit code injection5.1 Medium
- tosei online store management system ネット店舗管理システム, online store management system +1 moreTosei Online Store Management System ネット店舗管理システム Backend default credentials6.9 Medium
- open-xchange ox dovecot proVery large headers can cause resource exhaustion when parsing message. The message-parser...7.5 High
- Show moreLoading…