2024 CVEs (page 259)
Page 259 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35726 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19. |
CVE-2024-35725 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1… |
CVE-2024-35724 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in Bosa Themes Bosa Elementor Addons and Templates for WooCommerce.This issue affects Bosa Elementor Addons and Templates f… |
CVE-2024-35723 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0. |
CVE-2024-35722 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow –… |
CVE-2024-35721 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery –… |
CVE-2024-35720 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7. |
CVE-2024-35717 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – P… |
CVE-2024-23524 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in ONTRAPORT Inc. PilotPress.This issue affects PilotPress: from n/a through 2.0.30. |
CVE-2024-22298 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98. |
CVE-2024-22296 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28. |
CVE-2024-21751 | Medium | 5.4 | 2024-06-10 | Missing Authorization vulnerability in RabbitLoader.This issue affects RabbitLoader: from n/a through 2.19.13. |
CVE-2024-37880 | High | 7.5 | 2024-06-10 | The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel th… |
CVE-2024-5389 | High | 8.1 | 2024-06-09 | In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to create, update, get, and delete prompt variatio… |
CVE-2024-4577 | Critical | 9.8 | 2024-06-09 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain… |
CVE-2024-37570 | High | 8.8 | 2024-06-09 | On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update (upgrade.html) page does not perform sanitization on the username and path parameters (sent by an a… |
CVE-2024-37569 | High | 8.8 | 2024-06-09 | An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter… |
CVE-2024-2408 | Medium | 5.9 | 2024-06-09 | The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless… |
CVE-2024-5585 | High | 7.7 | 2024-06-09 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spa… |
CVE-2024-5458 | Medium | 5.3 | 2024-06-09 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating… |
CVE-2024-37568 | High | 7.5 | 2024-06-09 | lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified in a jwt.decode call, HMAC verification is a… |
CVE-2024-35748 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4. |
CVE-2024-35662 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in Andreas Sofantzis Simple COD Fees for WooCommerce.This issue affects Simple COD Fees for WooCommerce: from n/a through 2… |
CVE-2024-35661 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in SoftLab Upload Fields for WPForms.This issue affects Upload Fields for WPForms: from n/a through 1.0.2. |
CVE-2024-34802 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt.This issue affects AdFoxly – Ad Manager, AdSense Ads & Ads.Txt: from… |
CVE-2024-32081 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/… |
CVE-2024-31304 | High | 7.1 | 2024-06-09 | Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3. |
CVE-2024-31284 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8. |
CVE-2024-31283 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1… |
CVE-2024-31276 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for W… |
CVE-2024-31275 | High | 8.2 | 2024-06-09 | Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.4. |
CVE-2024-32713 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in AutoWriter AI Post Generator | AutoWriter.This issue affects AI Post Generator | AutoWriter: from n/a through 3.3. |
CVE-2024-32705 | High | 7.1 | 2024-06-09 | Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4. |
CVE-2024-32704 | High | 7.1 | 2024-06-09 | Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4. |
CVE-2024-32703 | High | 7.7 | 2024-06-09 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: f… |
CVE-2024-32701 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24. |
CVE-2024-31423 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH).This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.5. |
CVE-2024-31359 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Premmerce Premmerce Product Filter for WooCommerce premmerce-woocommerce-product-filter.This issue affects Premmerce Pro… |
CVE-2024-31352 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Email Subscribers & Newsletters.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.13. |
CVE-2024-31350 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in AWP Classifieds Team AWP Classifieds.This issue affects AWP Classifieds: from n/a through 4.3.1. |
CVE-2024-31347 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.1.0. |
CVE-2024-31307 | Medium | 6.3 | 2024-06-09 | Missing Authorization vulnerability in appscreo Easy Social Share Buttons.This issue affects Easy Social Share Buttons: from n/a through 9.4. |
CVE-2024-32725 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a… |
CVE-2024-32715 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1. |
CVE-2024-32714 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16. |
CVE-2024-37535 | Medium | 4.4 | 2024-06-09 | GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0… |
CVE-2024-32727 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Rometheme RomethemeForm For Elementor.This issue affects RomethemeForm For Elementor: from n/a through 1.1.2. |
CVE-2024-32824 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster.This issue affects Evergreen Content Poster… |
CVE-2024-32821 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9. |
CVE-2024-32820 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Social Share Pro Social Share Icons & Social Share Buttons.This issue affects Social Share Icons & Social Share Buttons… |
CVE-2024-32818 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter… |
CVE-2024-32814 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1… |
CVE-2024-32813 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9. |
CVE-2024-32811 | Medium | 5.3 | 2024-06-09 | Insertion of Sensitive Information into Log File vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooC… |
CVE-2024-32805 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5. |
CVE-2024-32804 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46. |
CVE-2024-32799 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3. |
CVE-2024-32798 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0. |
CVE-2024-32797 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in Martin Gibson WP LinkedIn Auto Publish.This issue affects WP LinkedIn Auto Publish: from n/a through 8.11. |
CVE-2024-32792 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n… |
CVE-2024-32787 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content P… |
CVE-2024-32784 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in CookieHub.This issue affects CookieHub: from n/a through 1.1.0. |
CVE-2024-32783 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in wpcreativeidea Advanced Testimonial Carousel for Elementor.This issue affects Advanced Testimonial Carousel for Elemento… |
CVE-2024-32779 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Avirtum Vision Interactive.This issue affects Vision Interactive: from n/a through 1.7.1. |
CVE-2024-32778 | High | 7.7 | 2024-06-09 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery con… |
CVE-2024-32777 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint.This issue affects BizPrint: from n/a through 4.3.39. |
CVE-2024-35669 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1. |
CVE-2024-35660 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1. |
CVE-2024-34435 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3. |
CVE-2024-33572 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5. |
CVE-2024-33565 | Critical | 9.1 | 2024-06-09 | Missing Authorization vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager.This issue affects Barcode Scanner with Inventory & Order Man… |
CVE-2024-33564 | High | 8.8 | 2024-06-09 | Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8. |
CVE-2024-33563 | High | 7.6 | 2024-06-09 | Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8. |
CVE-2024-33561 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8. |
CVE-2024-33555 | High | 8.1 | 2024-06-09 | Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8. |
CVE-2024-33547 | High | 8.3 | 2024-06-09 | Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10. |
CVE-2024-33545 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10. |
CVE-2024-33543 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06. |
CVE-2024-31274 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11. |
CVE-2024-31273 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support P… |
CVE-2024-31267 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a t… |
CVE-2024-31261 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars… |
CVE-2024-31252 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6. |
CVE-2024-31248 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2. |
CVE-2024-31244 | Critical | 9.8 | 2024-06-09 | Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17. |
CVE-2024-31243 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17. |
CVE-2024-30544 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18. |
CVE-2024-30529 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7. |
CVE-2024-30517 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2. |
CVE-2024-30515 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4. |
CVE-2024-30512 | Low | 3.7 | 2024-06-09 | Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.20. |
CVE-2024-30485 | High | 8.8 | 2024-06-09 | Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0. |
CVE-2024-30481 | Medium | 6.5 | 2024-06-09 | Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0. |
CVE-2024-30470 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through… |
CVE-2024-30467 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9. |
CVE-2024-30466 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: fro… |
CVE-2024-30465 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1. |
CVE-2024-30464 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in WPZOOM Social Icons Widget & Block by WPZOOM.This issue affects Social Icons Widget & Block by WPZOOM: from n/a through… |
CVE-2024-25929 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooC… |
CVE-2024-25092 | High | 8.8 | 2024-06-09 | Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0. |