CVEs published June 8, 2024
78 CVEs were published on June 8, 2024: 2 critical, 20 high.
- Published
- 78
- Critical
- 2
- High
- 20
- Medium
- 51
- Low
- 1
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Linux
- 6
- awordpresslife Formula
- 2
- Fahad Mahmood WP Docs
- 2
- Jewel Theme Master Addons for Elementor
- 2
- Team Heateor Heateor Social Login
- 2
- 10up ElasticPress
- 1
- AA Web Servant 12 Step Meeting List
- 1
- Amauri WPMobile.App
- 1
- Analytify
- 1
- apollo13themes Rife Free
- 1
Critical 2
High 20
- CVE-2024-35678WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerabilityContact Form to DB by BestWebSoft
- CVE-2024-35679WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerabilityStellarWP GiveWP
- CVE-2024-35687WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerabilityYannick Lefebvre Link Library
- CVE-2024-35693WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerabilityAA Web Servant 12 Step Meeting List
- CVE-2024-35694WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerabilityAmauri WPMobile.App
- CVE-2024-35696WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityFahad Mahmood WP Docs
- CVE-2024-35697WordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerabilityThimPress Eduma
- CVE-2024-35706WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerabilityTeam Heateor Heateor Social Login
- CVE-2024-35718WordPress Newsletters plugin <= 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerabilityTribulant Newsletters
- CVE-2024-35730WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerabilityrealmag777 Active Products Tables for WooCommerce
- CVE-2024-36968Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()Linux
- CVE-2024-36965remoteproc: mediatek: Make sure IPI buffer fits in L2TCMLinux
- CVE-2024-35733WordPress Auto Coupons for WooCommerce plugin <= 3.0.14 - Reflected Cross Site Scripting (XSS) vulnerabilityRLDD Auto Coupons for WooCommerce
- CVE-2024-35734WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityCodePeople WP Time Slots Booking Form
- CVE-2024-35736WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerabilityThemeisle Visualizer
- CVE-2024-35737WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLoopus WP Visitors Tracker
- CVE-2024-35750WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerabilitywpdevart Responsive Image Gallery, Gallery Album
- CVE-2024-5091SKT Addons for Elementor <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate and Creative Slider Widgetssonalsinha21 SKT Addons for Elementor
- CVE-2024-3668PowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege EscalationPowerPack Pro for Elementor
- CVE-2024-37408fprintd through 1.94.3 lacks a security attention mechanism, and thus unexpected actions might be authorized by "auth sufficient pam_fprintd
Medium, low and unrated 56
- CVE-2024-5771LabVantage LIMS POST Request sql injectionLabVantage LIMS
- CVE-2024-4680Insufficient Session Expiration in zenml-io/zenmlzenml-io/zenml · zenml
- CVE-2024-22151WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerabilityCodection Import and export users and customers
- CVE-2024-21748WordPress Icegram Engage plugin <= 3.1.21 - Broken Access Control vulnerabilityIcegram
- CVE-2024-35657WordPress WP-Recall plugin <= 16.26.6 - Cross Site Request Forgery (CSRF) vulnerabilityPlechev Andrey WP-Recall
- CVE-2024-35659WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerabilityIqonic Design KiviCare
- CVE-2024-35675WordPress Advanced Woo Labels plugin <= 1.93 - Cross Site Scripting (XSS) vulnerabilityILLID Advanced Woo Labels
- CVE-2024-35676WordPress Recurring PayPal Donations plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilitywpecommerce Recurring PayPal Donations
- CVE-2023-45707HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)HCL Software Connections Docs
- CVE-2024-35681WordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerabilitygVectors Team wpDiscuz
- CVE-2024-35682WordPress Otter Blocks PRO plugin <= 2.6.11 - Authenticated Sensitive Data Exposure vulnerabilityThemeisle Otter Blocks PRO
- CVE-2024-35684WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability10up ElasticPress
- CVE-2024-34765WordPress Sensei Pro (WC Paid Courses) plugin <= 4.23.1.1.23.1 - Cross Site Scripting (XSS) vulnerabilitySensei Pro
- CVE-2024-35688WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerabilityJewel Theme Master Addons for Elementor
- CVE-2024-35689WordPress Analytify plugin <= 5.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityAnalytify
- CVE-2024-35691WordPress Widget Options - Extended plugin <= 5.1.0 - Multiple Data Exposure VulnerabilityMarketing Fire Widget Options - Extended
- CVE-2024-35695WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityFahad Mahmood WP Docs
- CVE-2024-35698WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerabilityYITHEMES YITH WooCommerce Tab Manager
- CVE-2024-35699WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerabilityHasThemes HT Feed
- CVE-2024-35701WordPress PropertyHive plugin <= 2.0.13 - Cross Site Scripting (XSS) vulnerabilityPropertyHive
- CVE-2024-35702WordPress Master Addons for Elementor plugin <= 2.0.6.0 - Cross Site Scripting (XSS) vulnerabilityJewel Theme Master Addons for Elementor
- CVE-2024-35703WordPress Sina Extension for Elementor plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerabilitySinaExtra Sina Extension for Elementor
- CVE-2024-35704WordPress BlockArt Blocks plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityWPBlockArt BlockArt Blocks
- CVE-2024-35705WordPress Block for Font Awesome plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerabilityCiprian Popescu Block for Font Awesome
- CVE-2024-35707WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerabilityTeam Heateor Heateor Social Login
- CVE-2024-35708WordPress Rife Free theme <= 2.4.19 - Cross Site Scripting (XSS) vulnerabilityapollo13themes Rife Free
- CVE-2024-35709WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerabilityPOSIMYTH The Plus Addons for Elementor Page Builder Lite
- CVE-2024-35710WordPress Podlove Web Player plugin <= 5.7.3 - Sensitive Data Exposure vulnerabilityPodlove Web Player
- CVE-2024-35711WordPress Event theme <= 1.2.2 - Cross Site Scripting (XSS) vulnerabilityTheme Freesia Event
- CVE-2024-35713WordPress Testimonial Carousel For Elementor plugin <= 10.1.1 - Cross Site Scripting (XSS) vulnerabilityUAPP GROUP Testimonial Carousel For Elementor
- CVE-2024-35714WordPress Idyllic theme <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityTheme Freesia Idyllic
- CVE-2024-35715WordPress Bloglo and Blogvi themes affected by Cross Site Scripting (XSS) vulnerabilityperegrinethemes Bloglo · peregrinethemes Blogvi
- CVE-2024-35719WordPress RestroPress plugin <= 3.1.2.1 - Cross Site Scripting (XSS) vulnerabilityMagniGenie RestroPress
- CVE-2024-36970wifi: iwlwifi: Use request_module_nowaitLinux
- CVE-2024-35731WordPress Kenta Gutenberg Blocks plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerabilityWP Moose Kenta Gutenberg Blocks Responsive Blocks and block…
- CVE-2024-36969drm/amd/display: Fix division by zero in setup_dsc_configLinux
- CVE-2024-36967KEYS: trusted: Fix memory leak in tpm2_key_encode()Linux
- CVE-2024-36966erofs: reliably distinguish block based and fscache modeLinux
- CVE-2024-35732WordPress YITH Custom Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerabilityYITHEMES YITH Custom Login
- CVE-2024-35738WordPress Kognetiks Chatbot for WordPress plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerabilityKognetiks Chatbot for WordPress
- CVE-2024-35739WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerabilityRadiusTheme The Post Grid
- CVE-2024-35740WordPress Pixgraphy theme <= 1.3.8 - Cross Site Scripting (XSS) vulnerabilityTheme Freesia Pixgraphy
- CVE-2024-35751WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityCreative Motion, Will Bontrager Software Woody ad snippets
- CVE-2024-35752WordPress Stellissimo Text Box plugin 1.1.4 - Cross Site Scripting (XSS) vulnerabilityEnea Overclokk Stellissimo Text Box
- CVE-2024-5766Likeshop Merchandise admin cross site scriptingLikeshop
- CVE-2024-35753WordPress TemplatesNext OnePager plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityTemplatesNext OnePager
- CVE-2024-35755WordPress Weather Widget Pro plugin <= 1.1.40 - Cross Site Scripting (XSS) vulnerabilityEl tiempo Weather Widget Pro
- CVE-2024-35756WordPress Tooltip CK plugin <= 2.2.15 - Cross Site Scripting (XSS) vulnerabilityCeiKay Tooltip CK
- CVE-2024-5654CF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Updatewesterndeal GSheetConnector for CF7 – Connect Contact Form…
- CVE-2024-4468Salon booking system <= 9.9 - Missing Authorizationwordpresschef Salon Booking System – Free Version
- CVE-2024-5613Formula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_actionawordpresslife Formula
- CVE-2024-5087Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Changewebfactory Minimal Coming Soon – Coming Soon Page
- CVE-2024-5638Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_pluginsawordpresslife Formula
- CVE-2024-4661WP Reset <= 2.02 - Missing Authorization to License Key Modificationwebfactory WP Reset
- CVE-2024-5770WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Updatewebfactory WP Force SSL & HTTPS SSL Redirect
- CVE-2024-5663Cards for Beaver Builder <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards Widgetpratikchaskar Cards for Beaver Builder