Skip to content
OpenAdvisories

Archive

10 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /10 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

65 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-22298

    WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98.

    TMS Amelia
  • Medium 5.4
    CVE-2024-21751

    WordPress RabbitLoader plugin <= 2.19.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RabbitLoader.This issue affects RabbitLoader: from n/a through 2.19.13.

    RabbitLoader RabbitLoader
  • Medium 5.3
    CVE-2024-23524

    WordPress PilotPress plugin <= 2.0.30 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ONTRAPORT Inc. PilotPress.This issue affects PilotPress: from n/a through 2.0.30.

    ontraport PilotPress
  • Medium 4.3
    CVE-2024-4746

    WordPress Netgsm plugin <= 2.9.32 - Broken Access Control + CSRF vulnerability

    Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through <= 2.9.32.

    netgsm Netgsm
  • Medium 4.3
    CVE-2024-35717

    WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9.

    A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow
  • Medium 4.3
    CVE-2024-35720

    WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7.

    A WP Life Album Gallery – WordPress Gallery Web / CMS
  • Medium 4.3
    CVE-2024-35721

    WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5.

    A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery
  • Medium 4.3
    CVE-2024-35722

    WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0.

    A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow
  • Medium 4.3
    CVE-2024-35723

    WordPress Dashboard To-Do List plugin <= 1.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0.

    Andrew Dashboard To-Do List
  • Medium 4.3
    CVE-2024-35724

    WordPress Bosa Elementor Addons and Templates for WooCommerce plugin <= 1.0.12 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Bosa Themes Bosa Elementor Addons and Templates for WooCommerce.This issue affects Bosa Elementor Addons and Templates for WooCommerce: from n/a through 1.0.12.

    Bosa Themes Bosa Elementor Addons and Templates for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-35725

    WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.

    LA-Studio LA-Studio Element Kit for Elementor
  • Medium 4.3
    CVE-2024-35726

    WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19.

    Themekraft WooBuddy
  • Medium 4.3
    CVE-2024-35727

    WordPress Extra Product Options for WooCommerce plugin <= 3.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in actpro Extra Product Options for WooCommerce.This issue affects Extra Product Options for WooCommerce: from n/a through 3.0.6.

    actpro Extra Product Options for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-35729

    WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.2.6.

    Tickera Tickera
  • Medium 5.3
    CVE-2024-35735

    WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.

    codepeople WP Time Slots Booking Form
  • Medium 4.3
    CVE-2024-35741

    WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7.

    Awesome Support Team Awesome Support
  • Medium 5.3
    CVE-2024-35742

    WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0.

    Code Parrots Easy Forms for Mailchimp
  • Medium 4.0
    CVE-2024-4328

    CSRF in clear_personality_files_list in parisneo/lollms-webui

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the clear_personality_files_list function of the parisneo/lollms-webui v9.6. The vulnerability arises from the use of a GET request to clear personality files list, which lacks proper CSRF protection…

    parisneo parisneo/lollms-webui
  • Medium 6.5
    CVE-2022-45168

    An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur un…

  • Medium 6.1
    CVE-2022-45176

    An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under …

  • Medium 4.3
    CVE-2024-33850

    Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roste…

  • Medium 6.5
    CVE-2024-35474

    A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose…

  • Medium 5.7
    CVE-2024-36531

    nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /adm…

  • Medium 5.4
    CVE-2024-31612

    Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerabil…

  • Medium 5.4
    CVE-2024-31613

    BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code."