CVEs published in August 2024
2,982 vulnerabilities, 327 critical, 21 exploited.
- jegstudio gutenverseWordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- magic post thumbnail post thumbnail, magic-post-thumbnail magic post thumbnail +1 moreWordPress Generate Images – Magic Post Thumbnail plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- beaver builder builder, fastlinemedia beaver builder +1 moreWordPress Beaver Builder plugin <= 2.8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- robert felty collapsing archivesWordPress Collapsing Archives plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp delicious delicious recipes – wordpress recipe plugin, wpdelicious wp delicious +1 moreWordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpdeveloper embedpressWordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- skt themes blocks – gutenberg based page builder, sktthemes skt blocks, sonalsinha21 skt blocks – gutenberg based page builder +2 moreWordPress SKT Blocks plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dinesh karki wp armour extended, dineshkarki wp armour +1 moreWordPress WP Armour Extended plugin <= 1.26 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- automattic ghactivity, ghacitivity +1 moreWordPress GHActivity plugin <= 2.0.0-alpha - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nextbricks brickscore, bricksore +1 moreWordPress Brickscore plugin <= 1.4.2.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- cryoutcreations temperaWordPress Tempera theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cryoutcreations esoteraWordPress Esotera theme <= 1.2.5.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- classic addons – wpbakery page builder, webcodingplace classic addons – wpbakery page builder, wpbakery page builder +2 moreWordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- gianni porto intothedarkWordPress Into The Dark theme <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- genetech products web and woocommerce addons for wpbakery builderWordPress Web and WooCommerce Addons for WPBakery Builder plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- azurecurve toggle show/hide, toggle show\/hide +1 moreWordPress azurecurve Toggle Show/Hide plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- waspthemes yellowpencil, yellowpencil visual css style editor +1 moreWordPress Visual CSS Style Editor plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- dsgvo-for-wp dsgvo all in one for wpWordPress DSGVO All in one for WP plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- matter-labs zksolc, era-compiler-solidity +1 more`fold (xor (shl 1, x), -1) -> (rotl ~1, x)` misoptimization in zksolc5.9 Medium
- collabora onlineJavaScript Injection via url encoded values in links in Collabora Office Android6.3 Medium
- roxy-wiOS Command Injection via Port Scan Functionality in Roxy-WI8.8 High
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access HTTP open redirect6.8 Medium
- getkirby kirbyInsufficient permission checks in the language settings in Kirby CMS8.1 High
- smackcoders sendgrid, sendgrid for wordpress +1 moreWordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability8.2 High
- sk. abul hasan animated number countersWordPress Animated Number Counters plugin <= 1.9 - Editor+ Limited Local File Inclusion vulnerability6.5 Medium
- ibm maas360, maas360 mdm +1 moreIBM MaaS360 information disclosure4.6 Medium
- droipWordPress Droip plugin <= 1.1.1 - Unauthenticated Arbitrary File Download/Deletion vulnerability10.0 Critical
- delta electronics dtn soft, deltaww dtnsoft +1 morePath Traversal in Ocean Data Systems Dream Report8.4 High
- droipWordPress Droip plugin <= 1.1.1 - Subscriber+ Settings Change/Data Exposure Vulnerability6.3 Medium
- ilyasine maintenance & coming soon redirect animationWordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability3.7 Low
- wpsoul greenshift woocommerce addonWordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability8.5 High
- wpsoul greenshift query and meta addon, greenshift query addon +1 moreWordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability8.5 High
- propovoice, propovoice pro +1 moreWordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability9.3 Critical
- viictory media llc z y n i t h, victory media llc zynith +1 moreWordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Plugin Settings Change vulnerability6.5 Medium
- viictory media llc z y n i t h, victory media llc zynith +1 moreWordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Arbitrary Option Deletion vulnerability6.5 Medium
- eyecix jobsearch, jobsearch wp job board +1 moreWordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability9.8 Critical
- nitrojs nitropackWordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability4.8 Medium
- wbw product table pro, woobewoo product table, wbw product table pro +2 moreWordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability10.0 Critical
- templateinvaders ti woocommerce wishlistWordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability9.3 Critical
- stylemix cost calculator builderWordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability9.3 Critical
- wpweb elite docket (woocommerce collections / wishlist / watchlist), docket +1 moreWordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability9.3 Critical
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability7.6 High
- guizhou xiaoma technology jpressjpress Template Module edit path traversal5.1 Medium
- dingfanzu cmsdingfanzu CMS getBasicInfo.php sql injection5.3 Medium
- e4j s.r.l. vikrentcarWordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability9.3 Critical
- roundup wp registrations for the events calendarWordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability8.5 High
- cridio listingproWordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability9.3 Critical
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability8.5 High
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability9.3 Critical
- pricelisto best restaurant menu by pricelisto, great restaurant menu wp +1 moreWordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability8.5 High
- Show moreLoading…