Updated 10 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,781exploited flaws on CISA’s list

36added in the last 30 days

475new WordPress flaws this week

398,769entries in the database

41,498 results · page 564 of 830

Jun 9, 2024Advanced Local Pickup for WooCommerce: Missing AuthorizationCVE-2024-32814 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.
Product
Advanced Local Pickup for WooCommerce
Affected
up to 1.6.1
What to do
Affects up to 1.6.1. Update Advanced Local Pickup for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Integrate Google Drive: Missing AuthorizationCVE-2024-32813 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9.
Product
Integrate Google Drive
Affected
up to 1.3.9
What to do
Affects up to 1.3.9. Update Integrate Google Drive to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024USPS Shipping for WooCommerce – Live Rates: Insertion of Sensitive Information into Log FileCVE-2024-32811 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Insertion of Sensitive Information into Log File vulnerability in Octolize USPS Shipping for WooCommerce – Live Rates.This issue affects USPS Shipping for WooCommerce – Live Rates: from n/a through 1.9.4.
Product
USPS Shipping for WooCommerce – Live Rates
Affected
up to 1.9.4
What to do
Affects up to 1.9.4. Update USPS Shipping for WooCommerce – Live Rates to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Social Snap: Missing AuthorizationCVE-2024-32805 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5.
Product
Social Snap
Affected
up to 1.3.5
What to do
Affects up to 1.3.5. Update Social Snap to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024WP GoToWebinar: Missing AuthorizationCVE-2024-32804 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46.
Product
WP GoToWebinar
Affected
up to 14.46
What to do
Affects up to 14.46. Update WP GoToWebinar to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Easy Property Listings: Missing AuthorizationCVE-2024-32799 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3.
Product
Easy Property Listings
Affected
up to 3.5.3
What to do
Affects up to 3.5.3. Update Easy Property Listings to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024WP Travel Engine: Missing AuthorizationCVE-2024-32798 · WordPress plugins & themes · reported by PatchstackHigh 7.5
Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0.
Product
WP Travel Engine
Affected
up to 5.8.0
What to do
Affects up to 5.8.0. Update WP Travel Engine to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024WP LinkedIn Auto Publish: Missing AuthorizationCVE-2024-32797 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in Martin Gibson WP LinkedIn Auto Publish.This issue affects WP LinkedIn Auto Publish: from n/a through 8.11.
Product
WP LinkedIn Auto Publish
Affected
up to 8.11
What to do
Affects up to 8.11. Update WP LinkedIn Auto Publish to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Hummingbird: Missing AuthorizationCVE-2024-32792 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3.
Product
Hummingbird
Affected
up to 3.7.3
What to do
Affects up to 3.7.3. Update Hummingbird to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Secure Copy Content Protection and Content Locking: Missing AuthorizationCVE-2024-32787 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.7.1.
Product
Secure Copy Content Protection and Content Locking
Affected
up to 3.7.1
What to do
Affects up to 3.7.1. Update Secure Copy Content Protection and Content Locking to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024CookieHub: Missing AuthorizationCVE-2024-32784 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in CookieHub.This issue affects CookieHub: from n/a through 1.1.0.
Product
CookieHub
Affected
up to 1.1.0
What to do
Affects up to 1.1.0. Update CookieHub to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Advanced Testimonial Carousel for Elementor: Missing AuthorizationCVE-2024-32783 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in wpcreativeidea Advanced Testimonial Carousel for Elementor.This issue affects Advanced Testimonial Carousel for Elementor: from n/a through 3.0.0.
Product
Advanced Testimonial Carousel for Elementor
Affected
up to 3.0.0
What to do
Affects up to 3.0.0. Update Advanced Testimonial Carousel for Elementor to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Vision Interactive: Missing AuthorizationCVE-2024-32779 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Avirtum Vision Interactive.This issue affects Vision Interactive: from n/a through 1.7.1.
Product
Vision Interactive
Affected
up to 1.7.1
What to do
Affects up to 1.7.1. Update Vision Interactive to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Contest Gallery: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2024-32778 · WordPress plugins & themes · reported by PatchstackHigh 7.7
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.
Product
Contest Gallery
Affected
up to 21.3.4
What to do
Affects up to 21.3.4. Update Contest Gallery to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024BizPrint: Missing AuthorizationCVE-2024-32777 · WordPress plugins & themes · reported by PatchstackHigh 7.5
Missing Authorization vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint.This issue affects BizPrint: from n/a through 4.3.39.
Product
BizPrint
Affected
up to 4.3.39
What to do
Affects up to 4.3.39. Update BizPrint to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Debug Log Manager: Missing AuthorizationCVE-2024-35669 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1.
Product
Debug Log Manager
Affected
up to 2.3.1
What to do
Affects up to 2.3.1. Update Debug Log Manager to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Master Addons for Elementor: Missing AuthorizationCVE-2024-35660 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.
Product
Master Addons for Elementor
Affected
up to 2.0.5.4.1
What to do
Affects up to 2.0.5.4.1. Update Master Addons for Elementor to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Aiomatic: Missing AuthorizationCVE-2024-34435 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3.
Product
Aiomatic
Affected
up to 1.9.3
What to do
Affects up to 1.9.3. Update Aiomatic to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Nexter Blocks: Missing AuthorizationCVE-2024-33572 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.
Product
Nexter Blocks
Affected
up to 3.2.5
What to do
Affects up to 3.2.5. Update Nexter Blocks to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Barcode Scanner with Inventory & Order Manager: Missing AuthorizationCVE-2024-33565 · WordPress plugins & themes · reported by PatchstackCritical 9.1
Missing Authorization vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.3.
Product
Barcode Scanner with Inventory & Order Manager
Affected
up to 1.5.3
What to do
Affects up to 1.5.3. Update Barcode Scanner with Inventory & Order Manager to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024XStore: Missing AuthorizationCVE-2024-33564 · WordPress plugins & themes · reported by PatchstackHigh 8.8
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
Product
XStore
Affected
up to 9.3.8
What to do
Affects up to 9.3.8. Update XStore to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024XStore: Missing AuthorizationCVE-2024-33563 · WordPress plugins & themes · reported by PatchstackHigh 7.6
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
Product
XStore
Affected
up to 9.3.8
What to do
Affects up to 9.3.8. Update XStore to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024XStore: Missing AuthorizationCVE-2024-33561 · WordPress plugins & themes · reported by PatchstackHigh 7.5
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
Product
XStore
Affected
up to 9.3.8
What to do
Affects up to 9.3.8. Update XStore to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024XStore Core: Missing AuthorizationCVE-2024-33555 · WordPress plugins & themes · reported by PatchstackHigh 8.1
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.
Product
XStore Core
Affected
up to 5.3.8
What to do
Affects up to 5.3.8. Update XStore Core to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024WZone: Missing AuthorizationCVE-2024-33547 · WordPress plugins & themes · reported by PatchstackHigh 8.3
Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.
Product
WZone
Affected
up to 14.0.10
What to do
Affects up to 14.0.10. Update WZone to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024WZone: Missing AuthorizationCVE-2024-33545 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.
Product
WZone
Affected
up to 14.0.10
What to do
Affects up to 14.0.10. Update WZone to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024WP Time Slots Booking Form: Missing AuthorizationCVE-2024-33543 · WordPress plugins & themes · reported by PatchstackHigh 7.5
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.
Product
WP Time Slots Booking Form
Affected
up to 1.2.06
What to do
Affects up to 1.2.06. Update WP Time Slots Booking Form to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024EmbedPress: Missing AuthorizationCVE-2024-31274 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.
Product
EmbedPress
Affected
up to 3.9.11
What to do
Affects up to 3.9.11. Update EmbedPress to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024JS Help Desk – Best Help Desk & Support: Missing AuthorizationCVE-2024-31273 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.
Product
JS Help Desk – Best Help Desk & Support
Affected
up to 2.8.3
What to do
Affects up to 2.8.3. Update JS Help Desk – Best Help Desk & Support to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Flexible Checkout Fields for WooCommerce: Missing AuthorizationCVE-2024-31267 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.
Product
Flexible Checkout Fields for WooCommerce
Affected
up to 4.1.2
What to do
Affects up to 4.1.2. Update Flexible Checkout Fields for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Announcer – Notification & message bars: Missing AuthorizationCVE-2024-31261 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0.
Product
Announcer – Notification & message bars
Affected
up to 6.0
What to do
Affects up to 6.0. Update Announcer – Notification & message bars to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Responsive Lightbox: Missing AuthorizationCVE-2024-31252 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.
Product
Responsive Lightbox
Affected
up to 2.4.6
What to do
Affects up to 2.4.6. Update Responsive Lightbox to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024All-in-One Video Gallery: Missing AuthorizationCVE-2024-31248 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2.
Product
All-in-One Video Gallery
Affected
up to 3.5.2
What to do
Affects up to 3.5.2. Update All-in-One Video Gallery to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Bricksforge: Missing AuthorizationCVE-2024-31244 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.
Product
Bricksforge
Affected
up to 2.0.17
What to do
Affects up to 2.0.17. Update Bricksforge to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Bricksforge: Missing AuthorizationCVE-2024-31243 · WordPress plugins & themes · reported by PatchstackHigh 7.5
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.
Product
Bricksforge
Affected
up to 2.0.17
What to do
Affects up to 2.0.17. Update Bricksforge to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Whizzy: Missing AuthorizationCVE-2024-30544 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18.
Product
Whizzy
Affected
up to 1.1.18
What to do
Affects up to 1.1.18. Update Whizzy to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Tainacan: Missing AuthorizationCVE-2024-30529 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7.
Product
Tainacan
Affected
up to 0.20.7
What to do
Affects up to 0.20.7. Update Tainacan to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Sliced Invoices: Missing AuthorizationCVE-2024-30517 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.
Product
Sliced Invoices
Affected
up to 3.9.2
What to do
Affects up to 3.9.2. Update Sliced Invoices to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Events Manager: Missing AuthorizationCVE-2024-30515 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.
Product
Events Manager
Affected
up to 6.4.6.4
What to do
Affects up to 6.4.6.4. Update Events Manager to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024weForms: Missing AuthorizationCVE-2024-30512 · WordPress plugins & themes · reported by PatchstackLow 3.7
Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.20.
Product
weForms
Affected
up to 1.6.20
What to do
Affects up to 1.6.20. Update weForms to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Finale Lite: Missing AuthorizationCVE-2024-30485 · WordPress plugins & themes · reported by PatchstackHigh 8.8
Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0.
Product
Finale Lite
Affected
up to 2.18.0
What to do
Affects up to 2.18.0. Update Finale Lite to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024JCH Optimize: Broken Access ControlCVE-2024-30481 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0.
Product
JCH Optimize
Affected
up to 4.0.0
What to do
Affects up to 4.0.0. Update JCH Optimize to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024YITH WooCommerce Account Funds Premium: Missing AuthorizationCVE-2024-30470 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0.
Product
YITH WooCommerce Account Funds Premium
Affected
up to 1.33.0
What to do
Affects up to 1.33.0. Update YITH WooCommerce Account Funds Premium to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Essential Blocks for Gutenberg: Missing AuthorizationCVE-2024-30467 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9.
Product
Essential Blocks for Gutenberg
Affected
up to 4.4.9
What to do
Affects up to 4.4.9. Update Essential Blocks for Gutenberg to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024WooCommerce Multilingual & Multicurrency: Missing AuthorizationCVE-2024-30466 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.
Product
WooCommerce Multilingual & Multicurrency
Affected
up to 5.3.4
What to do
Affects up to 5.3.4. Update WooCommerce Multilingual & Multicurrency to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024PageLayer: Missing AuthorizationCVE-2024-30465 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Pagelayer Team PageLayer.This issue affects PageLayer: from n/a through 1.8.1.
Product
PageLayer
Affected
up to 1.8.1
What to do
Affects up to 1.8.1. Update PageLayer to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Social Icons Widget & Block by WPZOOM: Missing AuthorizationCVE-2024-30464 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in WPZOOM Social Icons Widget & Block by WPZOOM.This issue affects Social Icons Widget & Block by WPZOOM: from n/a through 4.2.15.
Product
Social Icons Widget & Block by WPZOOM
Affected
up to 4.2.15
What to do
Affects up to 4.2.15. Update Social Icons Widget & Block by WPZOOM to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Product Catalog Enquiry for WooCommerce by MultiVendorX: Missing AuthorizationCVE-2024-25929 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.5.
Product
Product Catalog Enquiry for WooCommerce by MultiVendorX
Affected
up to 5.0.5
What to do
Affects up to 5.0.5. Update Product Catalog Enquiry for WooCommerce by MultiVendorX to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024NextMove Lite: Missing AuthorizationCVE-2024-25092 · WordPress plugins & themes · reported by PatchstackHigh 8.8
Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0.
Product
NextMove Lite
Affected
up to 2.17.0
What to do
Affects up to 2.17.0. Update NextMove Lite to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 9, 2024Awesome Support: Missing AuthorizationCVE-2024-24716 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6.
Product
Awesome Support
Affected
up to 6.1.6
What to do
Affects up to 6.1.6. Update Awesome Support to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.