CVEs published August 30, 2019
33 CVEs were published on August 30, 2019: 0 critical, 1 high.
- Published
- 33
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- MongoDB Server
- 2
- ESTSOFT ALSee
- 1
- Salesforce Mulesoft · org.mule.runtime:mule
- 1
High 1
Medium, low and unrated 32
- CVE-2019-15630Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before AuguSalesforce Mulesoft · org.mule.runtime:mule
- CVE-2019-12810A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39.ESTSOFT ALSee
- CVE-2019-15842The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS.
- CVE-2019-15841The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout,
- CVE-2019-15840The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.
- CVE-2019-15839The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.
- CVE-2019-15838The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.
- CVE-2019-15837The webp-express plugin before 0.14.8 for WordPress has stored XSS.
- CVE-2019-15836The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS.
- CVE-2019-15835The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF.
- CVE-2019-15834The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.
- CVE-2019-2389Process termination via PID file manipulationMongoDB Server
- CVE-2019-15026memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c.
- CVE-2019-15833The simple-mail-address-encoder plugin before 1.7 for WordPress has reflected XSS.
- CVE-2019-15832The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.
- CVE-2019-15831The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.
- CVE-2019-15830The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.
- CVE-2019-15829The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS.
- CVE-2019-15828The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.
- CVE-2019-15827The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.
- CVE-2019-15826The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.
- CVE-2019-15825The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.
- CVE-2019-15824The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass.
- CVE-2019-15823The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.
- CVE-2019-15822The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal.
- CVE-2019-15821The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.
- CVE-2019-15820The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication.
- CVE-2019-15819The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication.
- CVE-2019-15818The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authentication for action=bulk301expo
- CVE-2019-15817The easy-property-listings plugin before 3.4 for WordPress has XSS.
- CVE-2019-15816The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_
- CVE-2015-9380The photo-gallery plugin before 1.2.42 for WordPress has CSRF.