CVEs published March 30, 2024
26 CVEs were published on March 30, 2024: 2 critical, 6 high.
- Published
- 26
- Critical
- 2
- High
- 6
- Medium
- 16
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- PHPGurukul Emergency Ambulance Hiring Portal
- 8
- brainstormforce Ultimate Addons for Beaver Builder – Lite
- 5
- roxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- 2
- BoldGrid Easy SEO – Simple and Effective SEO
- 1
- fernandobt List category posts
- 1
- ideaboxcreations PowerPack Addons for Elementor
- 1
- kylephillips Favorites
- 1
- munirkamal Gutenberg Block Editor Toolkit – EditorsKit
- 1
- parisneo/lollms-webui
- 1
- princeahmed File Manager for Google Drive – Integrate Googl…
- 1
Critical 2
- CVE-2024-2086Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Exportprinceahmed File Manager for Google Drive – Integrate Googl…
- CVE-2024-28288Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrator password reset vul
High 6
- CVE-2024-1522Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-3018Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpasswordwpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2024-3088PHPGurukul Emergency Ambulance Hiring Portal Forgot Password Page forgot-password.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-3087PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-3085PHPGurukul Emergency Ambulance Hiring Portal Admin Login Page login.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-2047ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_rawroxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
Medium, low and unrated 18
- CVE-2024-3091PHPGurukul Emergency Ambulance Hiring Portal Search Request Page search.php cross site scriptingPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-3090PHPGurukul Emergency Ambulance Hiring Portal Add Ambulance Page add-ambulance.php cross site scriptingPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-3089PHPGurukul Emergency Ambulance Hiring Portal Manage Ambulance Page manage-ambulance.php cross-site request forgeryPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-2491PowerPack Addons for Elementor <= 2.7.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via *_html_tag*ideaboxcreations PowerPack Addons for Elementor
- CVE-2024-3086PHPGurukul Emergency Ambulance Hiring Portal Ambulance Tracking Page ambulance-tracking.php cross site scriptingPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-2948Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodekylephillips Favorites
- CVE-2024-3084PHPGurukul Emergency Ambulance Hiring Portal Hire an Ambulance Page cross site scriptingPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2024-2140Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widgetbrainstormforce Ultimate Addons for Beaver Builder – Lite
- CVE-2024-2142Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widgetbrainstormforce Ultimate Addons for Beaver Builder – Lite
- CVE-2024-2141Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widgetbrainstormforce Ultimate Addons for Beaver Builder – Lite
- CVE-2024-2144Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widgetbrainstormforce Ultimate Addons for Beaver Builder – Lite
- CVE-2024-2143Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widgetbrainstormforce Ultimate Addons for Beaver Builder – Lite
- CVE-2024-1238ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets & Te…
- CVE-2024-1051List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingfernandobt List category posts
- CVE-2024-2794Gutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingmunirkamal Gutenberg Block Editor Toolkit – EditorsKit
- CVE-2024-0367Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Linkunitecms Unlimited Elements For Elementor
- CVE-2024-1692BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta DescriptionBoldGrid Easy SEO – Simple and Effective SEO
- CVE-2024-29278funboot v1.1 is vulnerable to Cross Site Scripting (XSS) via the title field in "create a message ."