Skip to content
OpenAdvisories

Archive

9 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /9 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

107 results · Feed

  • Medium 4.3
    CVE-2024-32804

    WordPress WP GoToWebinar plugin <= 14.46 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46.

    Martin Gibson WP GoToWebinar
  • Medium 6.5
    CVE-2024-32805

    WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5.

    Social Snap Social Snap
  • Medium 5.3
    CVE-2024-32811

    WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability

    Insertion of Sensitive Information into Log File vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.4.

    octolize USPS Shipping for WooCommerce – Live Rates Web / CMS
  • Medium 5.3
    CVE-2024-32813

    WordPress Integrate Google Drive plugin <= 1.3.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9.

    SoftLab Integrate Google Drive
  • Medium 5.3
    CVE-2024-32814

    WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.

    zorem Advanced Local Pickup for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-32818

    WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.

    RealMag777 WordPress Meta Data and Taxonomies Filter (MDTF) Web / CMS
  • Medium 5.3
    CVE-2024-32820

    WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.2 - Broken Access Control lead to Notice Dismissal vulnerability

    Missing Authorization vulnerability in Social Share Pro Social Share Icons & Social Share Buttons.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.6.2.

    Social Share Pro Social Share Icons & Social Share Buttons
  • Medium 4.3
    CVE-2024-32821

    WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9.

    TotalSuite Total Poll Lite
  • Medium 6.5
    CVE-2023-45188

    IBM Engineering Lifecycle Optimization Publishing file upload

    IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted request, a remote attacker could exploit this vulner…

    IBM Engineering Lifecycle Optimization Publishing
  • Medium 5.4
    CVE-2024-32824

    WordPress Evergreen Content Poster plugin <= 1.4.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster.This issue affects Evergreen Content Poster: from n/a through <= 1.4.2.

    Evergreen Content Poster Evergreen Content Poster
  • High 7.5
    CVE-2024-33543

    WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.

    codepeople WP Time Slots Booking Form
  • Medium 5.3
    CVE-2024-33545

    WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.

    AA-Team WZone
  • High 8.3
    CVE-2024-33547

    WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability

    Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.

    AA-Team WZone
  • High 8.1
    CVE-2024-33555

    WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.

    8theme XStore Core
  • High 7.5
    CVE-2024-33561

    WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

    8theme XStore
  • High 7.6
    CVE-2024-33563

    WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

    8theme XStore
  • High 8.8
    CVE-2024-33564

    WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability

    Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

    8theme XStore
  • Critical 9.1
    CVE-2024-33565

    WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.3 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.3.

    UKR Solution Barcode Scanner with Inventory & Order Manager
  • Medium 4.3
    CVE-2024-33572

    WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.

    POSIMYTH Nexter Blocks
  • Medium 4.3
    CVE-2024-34435

    WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3.

    CodeRevolution Aiomatic
  • Medium 6.5
    CVE-2024-35660

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability

    Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

    Jewel Theme Master Addons for Elementor
  • Medium 4.3
    CVE-2024-35669

    WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.

    Bowo Debug Log Manager
  • Medium 5.3
    CVE-2024-31274

    WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.

    WPDeveloper EmbedPress
  • Medium 5.3
    CVE-2024-31273

    WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.

    JS Help Desk JS Help Desk – Best Help Desk & Support Plugin
  • Medium 4.3
    CVE-2024-31267

    WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.

    WP Desk Flexible Checkout Fields for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-31261

    WordPress Announcer – Notification & message bars plugin <= 6.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0.

    Aakash Chakravarthy Announcer – Notification & message bars
  • Medium 4.3
    CVE-2024-31252

    WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.

    dfactory Responsive Lightbox
  • Medium 4.3
    CVE-2024-31248

    WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2.

    Team Plugins360 All-in-One Video Gallery
  • Critical 9.8
    CVE-2024-31244

    WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability

    Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

    Bricksforge Bricksforge
  • High 7.5
    CVE-2024-31243

    WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability

    Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

    Bricksforge Bricksforge
  • Medium 5.3
    CVE-2024-30544

    WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability

    Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18.

    UPQODE Whizzy
  • Medium 5.3
    CVE-2024-30529

    WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7.

    Tainacan.org Tainacan
  • Medium 4.3
    CVE-2024-30517

    WordPress Sliced Invoices plugin <= 3.9.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.

    Sliced Invoices Sliced Invoices
  • Medium 4.3
    CVE-2024-30515

    WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.

    Pixelite Events Manager
  • Low 3.7
    CVE-2024-30512

    WordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.20.

    weForms weForms
  • High 8.8
    CVE-2024-30485 Public exploit

    WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

    Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0.

    XLPlugins Finale Lite
  • Medium 6.5
    CVE-2024-30481

    WordPress JCH Optimize plugin <= 4.0.0 - Broken Access Control vulnerability

    Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0.

    Samuel Marshall JCH Optimize
  • Medium 6.5
    CVE-2024-30470

    WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0.

    Yith YITH WooCommerce Account Funds Premium Web / CMS
  • Medium 6.5
    CVE-2024-30467

    WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9.

    WPDeveloper Essential Blocks for Gutenberg
  • Medium 5.4
    CVE-2024-30466

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.

    OnTheGoSystems WooCommerce Multilingual & Multicurrency Web / CMS