Skip to content
OpenAdvisories

Archive

9 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /9 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

77 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-34435

    WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3.

    CodeRevolution Aiomatic
  • Medium 6.5
    CVE-2024-35660

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability

    Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

    Jewel Theme Master Addons for Elementor
  • Medium 4.3
    CVE-2024-35669

    WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.

    Bowo Debug Log Manager
  • Medium 5.3
    CVE-2024-31274

    WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.

    WPDeveloper EmbedPress
  • Medium 5.3
    CVE-2024-31273

    WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.

    JS Help Desk JS Help Desk – Best Help Desk & Support Plugin
  • Medium 4.3
    CVE-2024-31267

    WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.

    WP Desk Flexible Checkout Fields for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-31261

    WordPress Announcer – Notification & message bars plugin <= 6.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0.

    Aakash Chakravarthy Announcer – Notification & message bars
  • Medium 4.3
    CVE-2024-31252

    WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.

    dfactory Responsive Lightbox
  • Medium 4.3
    CVE-2024-31248

    WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2.

    Team Plugins360 All-in-One Video Gallery
  • Medium 5.3
    CVE-2024-30544

    WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability

    Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18.

    UPQODE Whizzy
  • Medium 5.3
    CVE-2024-30529

    WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7.

    Tainacan.org Tainacan
  • Medium 4.3
    CVE-2024-30517

    WordPress Sliced Invoices plugin <= 3.9.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.

    Sliced Invoices Sliced Invoices
  • Medium 4.3
    CVE-2024-30515

    WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.

    Pixelite Events Manager
  • Medium 6.5
    CVE-2024-30481

    WordPress JCH Optimize plugin <= 4.0.0 - Broken Access Control vulnerability

    Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0.

    Samuel Marshall JCH Optimize
  • Medium 6.5
    CVE-2024-30470

    WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0.

    Yith YITH WooCommerce Account Funds Premium Web / CMS
  • Medium 6.5
    CVE-2024-30467

    WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9.

    WPDeveloper Essential Blocks for Gutenberg
  • Medium 5.4
    CVE-2024-30466

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.

    OnTheGoSystems WooCommerce Multilingual & Multicurrency Web / CMS
  • Medium 6.5
    CVE-2024-30465

    WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1.

    Pagelayer Team PageLayer
  • Medium 5.4
    CVE-2024-30464 Scanner template

    WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPZOOM Social Icons Widget & Block by WPZOOM.This issue affects Social Icons Widget & Block by WPZOOM: from n/a through 4.2.15.

    WPZOOM Social Icons Widget & Block by WPZOOM
  • Medium 6.5
    CVE-2024-25929

    WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5.

    MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX Web / CMS
  • Medium 5.4
    CVE-2024-24716

    WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6.

    Awesome Support Team Awesome Support
  • Medium 6.5
    CVE-2023-34003

    WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability

    Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51.

    Woo WooCommerce Box Office Web / CMS
  • Medium 5.4
    CVE-2023-23640

    WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    Missing Authorization vulnerability in MainWP MainWP UpdraftPlus Extension.This issue affects MainWP UpdraftPlus Extension: from n/a through 4.0.6.

    mainwp MainWP UpdraftPlus Extension
  • Medium 5.4
    CVE-2023-23639

    WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    Missing Authorization vulnerability in MainWP MainWP Staging Extension.This issue affects MainWP Staging Extension: from n/a through 4.0.3.

    mainwp MainWP Staging Extension
  • Medium 5.3
    CVE-2023-51494

    WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1.

    Woo WooCommerce Product Vendors Web / CMS
  • Medium 6.5
    CVE-2023-52230

    WordPress Booster Plus for WooCommerce plugin < 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability

    Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3.

    Pluggabl Booster Plus for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2023-52232

    WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability

    Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

    Pluggabl Booster Plus for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-30539

    WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7.

    Awesome Support Team Awesome Support
  • Medium 6.5
    CVE-2024-30534

    WordPress Calendarista Basic Edition plugin <= 3.0.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through <= 3.0.5.

    Typps Calendarista Basic Edition
  • Medium 4.3
    CVE-2024-30537

    WordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce.This issue affects WPC Badge Management for WooCommerce: from n/a through 2.4.0.

    wpclever WPC Badge Management for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-30538

    WordPress DELUCKS SEO plugin <= 2.5.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in DELUCKS GmbH DELUCKS SEO.This issue affects DELUCKS SEO: from n/a through 2.5.4.

    delucks DELUCKS SEO
  • Medium 5.4
    CVE-2024-31246

    WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability

    Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 3.2.3.

    wpxpo PostX
  • Medium 4.3
    CVE-2024-31294

    WordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1.

    Fahad Mahmood WP Sort Order
  • Medium 6.3
    CVE-2024-5775

    SourceCodester Vehicle Management System updatebill.php sql injection

    A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatebill.php. The manipulation of the argument id leads to sql injection. The attack may b…

    SourceCodester Vehicle Management System
  • Medium 6.3
    CVE-2024-5773

    Netentsec NS-ASG Application Security Gateway deletemacbind.php sql injection

    A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql i…

    Netentsec NS-ASG Application Security Gateway
  • Medium 6.3
    CVE-2024-5772

    Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection

    A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /protocol/iscuser/deleteiscuser.php. The manipulation of the argument messagecontent…

    Netentsec NS-ASG Application Security Gateway
  • Medium 4.4
    CVE-2024-37535

    GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape…

    vte vte2.91 vte2.91 vte291 Debian Ubuntu Azure Linux