Skip to content
OpenAdvisories

Archive

June 2024

Vulnerabilities first published in this month (UTC), newest first.

← May 2024 2024 / June July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

1,633 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-32805

    WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5.

    Social Snap Social Snap
  • Medium 5.3
    CVE-2024-32811

    WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability

    Insertion of Sensitive Information into Log File vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.4.

    octolize USPS Shipping for WooCommerce – Live Rates Web / CMS
  • Medium 5.3
    CVE-2024-32813

    WordPress Integrate Google Drive plugin <= 1.3.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9.

    SoftLab Integrate Google Drive
  • Medium 5.3
    CVE-2024-32814

    WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.

    zorem Advanced Local Pickup for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-32818

    WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.

    RealMag777 WordPress Meta Data and Taxonomies Filter (MDTF) Web / CMS
  • Medium 5.3
    CVE-2024-32820

    WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.2 - Broken Access Control lead to Notice Dismissal vulnerability

    Missing Authorization vulnerability in Social Share Pro Social Share Icons & Social Share Buttons.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.6.2.

    Social Share Pro Social Share Icons & Social Share Buttons
  • Medium 4.3
    CVE-2024-32821

    WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9.

    TotalSuite Total Poll Lite
  • Medium 6.5
    CVE-2023-45188

    IBM Engineering Lifecycle Optimization Publishing file upload

    IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted request, a remote attacker could exploit this vulner…

    IBM Engineering Lifecycle Optimization Publishing
  • Medium 5.4
    CVE-2024-32824

    WordPress Evergreen Content Poster plugin <= 1.4.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster.This issue affects Evergreen Content Poster: from n/a through <= 1.4.2.

    Evergreen Content Poster Evergreen Content Poster
  • Medium 5.3
    CVE-2024-33545

    WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.

    AA-Team WZone
  • Medium 4.3
    CVE-2024-33572

    WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.

    POSIMYTH Nexter Blocks
  • Medium 4.3
    CVE-2024-34435

    WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3.

    CodeRevolution Aiomatic
  • Medium 6.5
    CVE-2024-35660

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability

    Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

    Jewel Theme Master Addons for Elementor
  • Medium 4.3
    CVE-2024-35669

    WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.

    Bowo Debug Log Manager
  • Medium 5.3
    CVE-2024-31274

    WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.

    WPDeveloper EmbedPress
  • Medium 5.3
    CVE-2024-31273

    WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.

    JS Help Desk JS Help Desk – Best Help Desk & Support Plugin
  • Medium 4.3
    CVE-2024-31267

    WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.

    WP Desk Flexible Checkout Fields for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-31261

    WordPress Announcer – Notification & message bars plugin <= 6.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0.

    Aakash Chakravarthy Announcer – Notification & message bars
  • Medium 4.3
    CVE-2024-31252

    WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.

    dfactory Responsive Lightbox
  • Medium 4.3
    CVE-2024-31248

    WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2.

    Team Plugins360 All-in-One Video Gallery
  • Medium 5.3
    CVE-2024-30544

    WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability

    Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18.

    UPQODE Whizzy
  • Medium 5.3
    CVE-2024-30529

    WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7.

    Tainacan.org Tainacan
  • Medium 4.3
    CVE-2024-30517

    WordPress Sliced Invoices plugin <= 3.9.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.

    Sliced Invoices Sliced Invoices
  • Medium 4.3
    CVE-2024-30515

    WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.

    Pixelite Events Manager
  • Medium 6.5
    CVE-2024-30481

    WordPress JCH Optimize plugin <= 4.0.0 - Broken Access Control vulnerability

    Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0.

    Samuel Marshall JCH Optimize
  • Medium 6.5
    CVE-2024-30470

    WordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0.

    Yith YITH WooCommerce Account Funds Premium Web / CMS
  • Medium 6.5
    CVE-2024-30467

    WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9.

    WPDeveloper Essential Blocks for Gutenberg
  • Medium 5.4
    CVE-2024-30466

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.

    OnTheGoSystems WooCommerce Multilingual & Multicurrency Web / CMS
  • Medium 6.5
    CVE-2024-30465

    WordPress PageLayer plugin <= 1.8.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1.

    Pagelayer Team PageLayer
  • Medium 5.4
    CVE-2024-30464 Scanner template

    WordPress Social Icons Widget & Block by WPZOOM plugin <= 4.2.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPZOOM Social Icons Widget & Block by WPZOOM.This issue affects Social Icons Widget & Block by WPZOOM: from n/a through 4.2.15.

    WPZOOM Social Icons Widget & Block by WPZOOM
  • Medium 6.5
    CVE-2024-25929

    WordPress Product Catalog Mode For Woocommerce plugin <= 5.0.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5.

    MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX Web / CMS
  • Medium 5.4
    CVE-2024-24716

    WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6.

    Awesome Support Team Awesome Support
  • Medium 6.5
    CVE-2023-34003

    WordPress WooCommerce Box Office plugin <= 1.1.51 - Unauthenticated Save Ticket Barcode vulnerability

    Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.1.51.

    Woo WooCommerce Box Office Web / CMS
  • Medium 5.4
    CVE-2023-23640

    WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    Missing Authorization vulnerability in MainWP MainWP UpdraftPlus Extension.This issue affects MainWP UpdraftPlus Extension: from n/a through 4.0.6.

    mainwp MainWP UpdraftPlus Extension
  • Medium 5.4
    CVE-2023-23639

    WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    Missing Authorization vulnerability in MainWP MainWP Staging Extension.This issue affects MainWP Staging Extension: from n/a through 4.0.3.

    mainwp MainWP Staging Extension
  • Medium 5.3
    CVE-2023-51494

    WordPress WooCommerce Product Vendors plugin <= 2.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1.

    Woo WooCommerce Product Vendors Web / CMS
  • Medium 6.5
    CVE-2023-52230

    WordPress Booster Plus for WooCommerce plugin < 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability

    Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3.

    Pluggabl Booster Plus for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2023-52232

    WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability

    Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

    Pluggabl Booster Plus for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-30539

    WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7.

    Awesome Support Team Awesome Support
  • Medium 6.5
    CVE-2024-30534

    WordPress Calendarista Basic Edition plugin <= 3.0.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through <= 3.0.5.

    Typps Calendarista Basic Edition