CVEs published June 1, 2024
21 CVEs were published on June 1, 2024: 2 critical, 5 high.
- Published
- 21
- Critical
- 2
- High
- 5
- Medium
- 14
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- vanderwijk Content Blocks
- 2
- wproyal Royal Addons for Elementor – Addons and Templates K…
- 2
- averta Master Slider – Responsive Touch Slider
- 1
- dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy…
- 1
- divisupreme Supreme Modules Lite – Divi Theme, Extra Theme…
- 1
- Erez Hadas-Sonnenschein Smartarget Message Bar
- 1
- f1logic Contact Form Manager
- 1
- Global Notification Bar
- 1
- godaddy Page Builder Gutenberg Blocks – CoBlocks
- 1
- lunary-ai/lunary
- 1
Critical 2
High 5
- CVE-2024-4148Redos (Regular Expression Denial of Service) in lunary-ai/lunarylunary-ai/lunary
- CVE-2024-5348Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributesnicdark Elements For Elementor
- CVE-2024-3821wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & ModificationwpDataTables – WordPress Data Table, Dynamic Tables & Table…
- CVE-2024-4958User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalationwpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2024-3564Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcodevanderwijk Content Blocks
Medium, low and unrated 14
- CVE-2024-35645WordPress Random Banner plugin <= 4.2.12 - Cross Site Scripting (XSS) vulnerabilityM A Vinoth Kumar Random Banner
- CVE-2024-35646WordPress Smartarget Message Bar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityErez Hadas-Sonnenschein Smartarget Message Bar
- CVE-2024-35647WordPress Global Notification Bar plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityGlobal Notification Bar
- CVE-2024-35636WordPress Uploadcare File Uploader and Adaptive Delivery plugin <= 3.0.11 - Cross Site Request Forgery (CSRF) vulnerabilityUploadcare File Uploader and Adaptive Delivery
- CVE-2024-2295Contact Form Manager <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingf1logic Contact Form Manager
- CVE-2024-1324QQWorld Auto Save Images <= 1.9.8 - Missing Authorization to Arbitrary Post Content RetrievalQQWorld Auto Save Images
- CVE-2024-2506Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JSpopupbuilder Popup Builder – Create highly converting, mobi…
- CVE-2024-4087Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widgetwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2024-5501Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.51 - Authenticated (Contributor+) Stored Cross-Site Scriptingdivisupreme Supreme Modules Lite – Divi Theme, Extra Theme…
- CVE-2024-4342Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2023-6382Master Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingaverta Master Slider – Responsive Touch Slider
- CVE-2024-3565Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcodevanderwijk Content Blocks
- CVE-2024-4711WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scriptingdcooney Ajax Load More – Infinite Scroll, Load More, & Lazy…
- CVE-2024-2933Page Builder Gutenberg Blocks – CoBlocks <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profilesgodaddy Page Builder Gutenberg Blocks – CoBlocks