CVEs published May 25, 2024
12 CVEs were published on May 25, 2024: 0 critical, 1 high.
- Published
- 12
- Critical
- 0
- High
- 1
- Medium
- 11
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Ruijie RG-UAC
- 5
- anji-plus AJ-Report
- 1
- designextreme Reviews and Rating – Google Reviews
- 1
- Microsoft Edge
- 1
- nicdark ND Shortcodes
- 1
- nicheaddons Primary Addon for Elementor
- 1
- smub Popup Builder & Popup Maker for WordPress – OptinMonst…
- 1
- uapp Testimonial Carousel For Elementor
- 1
High 1
Medium, low and unrated 11
- CVE-2024-5350anji-plus AJ-Report pageList sql injectionanji-plus AJ-Report
- CVE-2024-5340Ruijie RG-UAC sub_commit.php os command injectionRuijie RG-UAC
- CVE-2024-5339Ruijie RG-UAC online_check.php os command injectionRuijie RG-UAC
- CVE-2024-5338Ruijie RG-UAC online.php os command injectionRuijie RG-UAC
- CVE-2024-5337Ruijie RG-UAC user_commit.php os command injectionRuijie RG-UAC
- CVE-2024-5336Ruijie RG-UAC vlan_add_commit.php addVlan os command injectionRuijie RG-UAC
- CVE-2024-4045Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingsmub Popup Builder & Popup Maker for WordPress – OptinMonst…
- CVE-2024-5218Reviews and Rating – Google Reviews <= 5.2 - Authenticated (Author+) Stored Cross-Site Scriptingdesignextreme Reviews and Rating – Google Reviews
- CVE-2024-4858Testimonial Carousel For Elementor <= 10.2.0 - Missing Authorization to Limited Setting Updateuapp Testimonial Carousel For Elementor
- CVE-2024-5229Primary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widgetnicheaddons Primary Addon for Elementor
- CVE-2024-5220ND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scriptingnicdark ND Shortcodes