CVEs published July 6, 2024
24 CVEs were published on July 6, 2024: 0 critical, 3 high.
- Published
- 24
- Critical
- 0
- High
- 3
- Medium
- 19
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- mudler/localai
- 2
- Axelerant Testimonials Widget
- 1
- biplob018 Image Hover Effects - Caption Hover with Carousel
- 1
- Delower WP To Do
- 1
- Kodezen Limited Academy LMS
- 1
- Linux
- 1
- Livemesh Addons for Elementor
- 1
- Robert Macchi WP Scraper
- 1
- Saiful Islam UltraAddons Elementor Lite
- 1
- StaxWP Elementor Addons, Widgets and Enhancements – Stax
- 1
High 3
Medium, low and unrated 21
- CVE-2024-6095SSRF and Partial LFI in /models/apply Endpoint in mudler/localaimudler/localai
- CVE-2024-37554WordPress UltraAddons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilitySaiful Islam UltraAddons Elementor Lite
- CVE-2024-37553WordPress Testimonials Widget plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerabilityAxelerant Testimonials Widget
- CVE-2024-37547WordPress Elementor Addons by Livemesh plugin <= 8.4.0 - Local File Inclusion vulnerabilityLivemesh Addons for Elementor
- CVE-2024-37546WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerabilitybiplob018 Image Hover Effects - Caption Hover with Carousel
- CVE-2024-37542WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilityWpDevArt Responsive Image Gallery, Gallery Album
- CVE-2024-37541WordPress Elementor Addons, Widgets and Enhancements – Stax plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityStaxWP Elementor Addons, Widgets and Enhancements – Stax
- CVE-2024-37539WordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityDelower WP To Do
- CVE-2024-37234WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerabilityKodezen Limited Academy LMS
- CVE-2024-37208WordPress WP Scraper plugin <= 5.7 - Server Side Request Forgery (SSRF) vulnerabilityRobert Macchi WP Scraper
- CVE-2024-5616CSRF Vulnerability in mudler/LocalAImudler/localai
- CVE-2024-40594The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible t
- CVE-2024-40596An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1.
- CVE-2024-40598An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1.
- CVE-2024-40599An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1.
- CVE-2024-40600An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1.
- CVE-2024-40601An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1.
- CVE-2024-40602An issue was discovered in the Tempo skin for MediaWiki through 1.42.1.
- CVE-2024-40603An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1.
- CVE-2024-40604An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1.
- CVE-2024-40605An issue was discovered in the Foreground skin for MediaWiki through 1.42.1.