# CVEs published 2019-06-02

4 CVEs were published on June 2, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-12566](https://cve.now/CVE-2019-12566.md): The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php. (no CVSS)
- [CVE-2019-12564](https://cve.now/CVE-2019-12564.md): In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backu (no CVSS)
- [CVE-2017-18376](https://cve.now/CVE-2017-18376.md): An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write acce (no CVSS)
- [CVE-2019-12530](https://cve.now/CVE-2019-12530.md): Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.