CVEs published July 27, 2024
29 CVEs were published on July 27, 2024: 0 critical, 4 high.
- Published
- 29
- Critical
- 0
- High
- 4
- Medium
- 25
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- techjewel Fluent Forms – Customizable Contact Forms, Survey…
- 4
- Tenda O3
- 2
- themeum Tutor LMS – Migration Tool
- 2
- Aramex Shipping WooCommerce
- 1
- CodeRevolution Aiomatic - Automatic AI Content Writer & Edi…
- 1
- coffee2code Add Admin CSS
- 1
- coffee2code Add Admin JavaScript
- 1
- coffee2code Admin Post Navigation
- 1
- coffee2code Admin Trim Interface
- 1
- coffee2code One Click Close Comments
- 1
High 4
- CVE-2024-7152Tenda O3 setMacFilterList fromSafeSetMacFilter stack-based overflowTenda O3
- CVE-2024-7151Tenda O3 setMacFilter fromMacFilterSet stack-based overflowTenda O3
- CVE-2024-6431Media.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Uploadmnetadmanager Media.net Ads Manager
- CVE-2024-6152Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injectionwptexture Flipbox Builder
Medium, low and unrated 25
- CVE-2024-7153Netgear WN604 siteSurvey.php direct requestNetgear WN604
- CVE-2024-6703Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fieldstechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2024-6518Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scriptingtechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2024-6520Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scriptingtechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2024-6897aThemes Starter Sites <= 1.0.53 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadsmub aThemes Starter Sites
- CVE-2024-6521Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scriptingtechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2024-6627Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widgetthehappymonster Happy Addons for Elementor
- CVE-2024-5614Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposurepiotnetdotcom Piotnet Addons For Elementor
- CVE-2024-6458WooCommerce Product Table Lite <= 3.5.1 - Missing Authorization to (Subscriber+) Stored Cross-Site Scriptingwcproducttable Product Table and List Builder for WooCommer…
- CVE-2024-6569Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosurevibhorchhabra Campaign Monitor for WordPress
- CVE-2024-5969AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email SendingCodeRevolution Aiomatic - Automatic AI Content Writer & Edi…
- CVE-2024-6546One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosurecoffee2code One Click Close Comments
- CVE-2024-6634Master Currency WP <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcodewibergsweb Master Currency WP
- CVE-2024-6661ParityPress <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scriptingparitydiscounts ParityPress – Parity Pricing with Discount…
- CVE-2024-6566Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path DisclosureAramex Shipping WooCommerce
- CVE-2024-6549Admin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosurecoffee2code Admin Post Navigation
- CVE-2024-6573Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosuretomdude Intelligence
- CVE-2024-6545Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosurecoffee2code Admin Trim Interface
- CVE-2024-6591Ultimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creationnitesh_singh Ultimate WordPress Auction Plugin
- CVE-2024-6548Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosurecoffee2code Add Admin JavaScript
- CVE-2024-1798Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xmlthemeum Tutor LMS – Migration Tool
- CVE-2024-1804Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xmlthemeum Tutor LMS – Migration Tool
- CVE-2024-4410IgnitionDeck Crowdfunding Platform <= 1.9.8 - Missing Authorizationignitionwp IgnitionDeck Crowdfunding Platform
- CVE-2024-6547Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosurecoffee2code Add Admin CSS
- CVE-2024-42029xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e.g., because single