Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list

33added in the last 30 days

531new WordPress flaws this week

391,883entries in the database

4,276 results · page 71 of 86

Jun 11, 2024Aspose.Words Exporter: Missing AuthorizationCVE-2024-32146 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Aspose.Cloud Marketplace Aspose.Words Exporter.This issue affects Aspose.Words Exporter: from n/a through 6.3.1.
Product
Aspose.Words Exporter
Affected
up to 6.3.1
What to do
Affects up to 6.3.1. Update Aspose.Words Exporter to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Podlove Podcast Publisher: Missing AuthorizationCVE-2024-32143 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0.
Product
Podlove Podcast Publisher
Affected
up to 4.1.0
What to do
Affects up to 4.1.0. Update Podlove Podcast Publisher to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024ACF Photo Gallery Field: Missing AuthorizationCVE-2024-23518 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6.
Product
ACF Photo Gallery Field
Affected
up to 2.6
What to do
Affects up to 2.6. Update ACF Photo Gallery Field to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MailerLite – WooCommerce integration: Missing AuthorizationCVE-2023-52227 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8.
Product
MailerLite – WooCommerce integration
Affected
up to 2.0.8
What to do
Affects up to 2.0.8. Update MailerLite – WooCommerce integration to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Revolut Gateway for WooCommerce: Missing AuthorizationCVE-2023-52224 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7.
Product
Revolut Gateway for WooCommerce
Affected
up to 4.9.7
What to do
Affects up to 4.9.7. Update Revolut Gateway for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Preloader for Website: Missing AuthorizationCVE-2023-48273 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2.
Product
Preloader for Website
Affected
up to 1.2.2
What to do
Affects up to 1.2.2. Update Preloader for Website to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024weMail: Missing AuthorizationCVE-2024-34822 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2.
Product
weMail
Affected
up to 1.14.2
What to do
Affects up to 1.14.2. Update weMail to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Contact List: Missing AuthorizationCVE-2024-34821 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87.
Product
Contact List
Affected
up to 2.9.87
What to do
Affects up to 2.9.87. Update Contact List to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MC Woocommerce Wishlist: Missing AuthorizationCVE-2024-34819 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.
Product
MC Woocommerce Wishlist
Affected
up to 1.7.2
What to do
Affects up to 1.7.2. Update MC Woocommerce Wishlist to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Radio Player: Missing AuthorizationCVE-2024-34753 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
Product
Radio Player
Affected
up to 2.0.73
What to do
Affects up to 2.0.73. Update Radio Player to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Welcart e-Commerce: Missing AuthorizationCVE-2024-32144 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.
Product
Welcart e-Commerce
Affected
up to 2.9.14
What to do
Affects up to 2.9.14. Update Welcart e-Commerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Happyforms: Missing AuthorizationCVE-2024-23521 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10.
Product
Happyforms
Affected
up to 1.25.10
What to do
Affects up to 1.25.10. Update Happyforms to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Ninja Tables: Missing AuthorizationCVE-2024-23503 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.
Product
Ninja Tables
Affected
up to 5.0.6
What to do
Affects up to 5.0.6. Update Ninja Tables to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Post SMTP Mailer/Email Log: Missing AuthorizationCVE-2023-52233 · WordPress plugins & themes · reported by PatchstackHigh 8.6
Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6.
Product
Post SMTP Mailer/Email Log
Affected
up to 2.8.6
What to do
Affects up to 2.8.6. Update Post SMTP Mailer/Email Log to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MC4WP: Missing AuthorizationCVE-2023-51682 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.
Product
MC4WP
Affected
up to 4.9.9
What to do
Affects up to 4.9.9. Update MC4WP to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Slider by Soliloquy: Missing AuthorizationCVE-2023-51519 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2.
Product
Slider by Soliloquy
Affected
up to 2.7.2
What to do
Affects up to 2.7.2. Update Slider by Soliloquy to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WP EasyCart: Missing AuthorizationCVE-2024-35667 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19.
Product
WP EasyCart
Affected
up to 5.5.19
What to do
Affects up to 5.5.19. Update WP EasyCart to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Insert Post Ads: Missing AuthorizationCVE-2024-35665 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert Post Ads: from n/a through 1.3.2.
Product
Insert Post Ads
Affected
up to 1.3.2
What to do
Affects up to 1.3.2. Update Insert Post Ads to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WP Translate: Missing AuthorizationCVE-2024-35663 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0.
Product
WP Translate
Affected
up to 5.3.0
What to do
Affects up to 5.3.0. Update WP Translate to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Photo Gallery by 10Web: Missing AuthorizationCVE-2024-35628 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.
Product
Photo Gallery by 10Web
Affected
up to 1.8.25
What to do
Affects up to 1.8.25. Update Photo Gallery by 10Web to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WP Discourse: Missing AuthorizationCVE-2024-35168 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1.
Product
WP Discourse
Affected
up to 2.5.1
What to do
Affects up to 2.5.1. Update WP Discourse to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024CF7 WOW Styler: Missing AuthorizationCVE-2024-34826 · WordPress plugins & themes · reported by PatchstackMedium 6.3
Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4.
Product
CF7 WOW Styler
Affected
up to 1.6.4
What to do
Affects up to 1.6.4. Update CF7 WOW Styler to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024If-So Dynamic Content Personalization: Missing AuthorizationCVE-2024-34820 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a through 1.7.1.
Product
If-So Dynamic Content Personalization
Affected
up to 1.7.1
What to do
Affects up to 1.7.1. Update If-So Dynamic Content Personalization to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Pardot: Missing AuthorizationCVE-2024-32148 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0.
Product
Pardot
Affected
up to 2.1.0
What to do
Affects up to 2.1.0. Update Pardot to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WC Marketplace: Missing AuthorizationCVE-2024-24703 · WordPress plugins & themes · reported by PatchstackHigh 8.6
Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25.
Product
WC Marketplace
Affected
up to 4.0.25
What to do
Affects up to 4.0.25. Update WC Marketplace to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024ActivityPub: Missing AuthorizationCVE-2023-52199 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue affects ActivityPub: from n/a through 1.0.5.
Product
ActivityPub
Affected
up to 1.0.5
What to do
Affects up to 1.0.5. Update ActivityPub to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WooCommerce Canada Post Shipping: Missing AuthorizationCVE-2023-51498 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3.
Product
WooCommerce Canada Post Shipping
Affected
up to 2.8.3
What to do
Affects up to 2.8.3. Update WooCommerce Canada Post Shipping to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Leyka: Missing AuthorizationCVE-2024-35683 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1.
Product
Leyka
Affected
up to 3.31.1
What to do
Affects up to 3.31.1. Update Leyka to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MJ Update History: Missing AuthorizationCVE-2024-35671 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update History: from n/a through 1.0.4.
Product
MJ Update History
Affected
up to 1.0.4
What to do
Affects up to 1.0.4. Update MJ Update History to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024weDocs: Missing AuthorizationCVE-2024-34442 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4.
Product
weDocs
Affected
up to 2.1.4
What to do
Affects up to 2.1.4. Update weDocs to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WordPress Backup & Migration: Missing AuthorizationCVE-2023-52183 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3.
Product
WordPress Backup & Migration
Affected
up to 1.4.3
What to do
Affects up to 1.4.3. Update WordPress Backup & Migration to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Radcliffe 2: Missing AuthorizationCVE-2024-35685 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Anders Norén Radcliffe 2.This issue affects Radcliffe 2: from n/a through 2.0.17.
Product
Radcliffe 2
Affected
up to 2.0.17
What to do
Affects up to 2.0.17. Update Radcliffe 2 to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MC Woocommerce Wishlist: Missing AuthorizationCVE-2024-34813 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.8.
Product
MC Woocommerce Wishlist
Affected
up to 1.7.8
What to do
Affects up to 1.7.8. Update MC Woocommerce Wishlist to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Product Expiry for WooCommerce: Missing AuthorizationCVE-2023-52179 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5.
Product
Product Expiry for WooCommerce
Affected
up to 2.5
What to do
Affects up to 2.5. Update Product Expiry for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Copymatic – AI Content Writer & Generator: Missing AuthorizationCVE-2024-35716 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.9.
Product
Copymatic – AI Content Writer & Generator
Affected
up to 1.9
What to do
Affects up to 1.9. Update Copymatic – AI Content Writer & Generator to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Cookie Consent: Missing AuthorizationCVE-2024-35692 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Termly Cookie Consent.This issue affects Cookie Consent: from n/a through 3.2.
Product
Cookie Consent
Affected
up to 3.2
What to do
Affects up to 3.2. Update Cookie Consent to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024SportsPress – Sports Club & League Manager: Missing AuthorizationCVE-2024-34824 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in ThemeBoy SportsPress – Sports Club & League Manager.This issue affects SportsPress – Sports Club & League Manager: from n/a through 2.7.20.
Product
SportsPress – Sports Club & League Manager
Affected
up to 2.7.20
What to do
Affects up to 2.7.20. Update SportsPress – Sports Club & League Manager to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Load More Anything: Missing AuthorizationCVE-2024-24704 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in AddonMaster Load More Anything.This issue affects Load More Anything: from n/a through 3.3.3.
Product
Load More Anything
Affected
up to 3.3.3
What to do
Affects up to 3.3.3. Update Load More Anything to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WooCommerce Conversion Tracking: Missing AuthorizationCVE-2023-52217 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11.
Product
WooCommerce Conversion Tracking
Affected
up to 2.0.11
What to do
Affects up to 2.0.11. Update WooCommerce Conversion Tracking to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WooCommerce Product Vendors: Missing AuthorizationCVE-2023-52186 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2.
Product
WooCommerce Product Vendors
Affected
up to 2.2.2
What to do
Affects up to 2.2.2. Update WooCommerce Product Vendors to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Elementor Website Builder: Missing AuthorizationCVE-2023-33922 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2.
Product
Elementor Website Builder
Affected
up to 3.13.2
What to do
Affects up to 3.13.2. Update Elementor Website Builder to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Yoast SEO Premium: Missing AuthorizationCVE-2023-28775 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4.
Product
Yoast SEO Premium
Affected
up to 20.4
What to do
Affects up to 20.4. Update Yoast SEO Premium to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Tutor LMS: Missing AuthorizationCVE-2023-25799 · WordPress plugins & themes · reported by PatchstackHigh 8.3
Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8.
Product
Tutor LMS
Affected
up to 2.1.8
What to do
Affects up to 2.1.8. Update Tutor LMS to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 10, 2024Crafthemes Demo Import: Missing AuthorizationCVE-2024-34800 · WordPress plugins & themes · reported by PatchstackHigh 7.6
Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a through <= 3.3.
Product
Crafthemes Demo Import
Affected
up to 3.3
What to do
Affects up to 3.3. Update Crafthemes Demo Import to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 10, 2024Netgsm: Missing AuthorizationCVE-2024-4746 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through <= 2.9.32.
Product
Netgsm
Affected
up to 2.9.32
What to do
Affects up to 2.9.32. Update Netgsm to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 10, 2024Giveaways and Contests by RafflePress: Missing AuthorizationCVE-2024-4745 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in RafflePress Giveaways and Contests by RafflePress.This issue affects Giveaways and Contests by RafflePress: from n/a through 1.12.4.
Product
Giveaways and Contests by RafflePress
Affected
up to 1.12.4
What to do
Affects up to 1.12.4. Update Giveaways and Contests by RafflePress to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 10, 2024iPages Flipbook: Missing AuthorizationCVE-2024-4744 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Avirtum iPages Flipbook.This issue affects iPages Flipbook: from n/a through 1.5.1.
Product
iPages Flipbook
Affected
up to 1.5.1
What to do
Affects up to 1.5.1. Update iPages Flipbook to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 10, 2024Easy Forms for Mailchimp: Missing AuthorizationCVE-2024-35742 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0.
Product
Easy Forms for Mailchimp
Affected
up to 6.9.0
What to do
Affects up to 6.9.0. Update Easy Forms for Mailchimp to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 10, 2024Awesome Support: Missing AuthorizationCVE-2024-35741 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7.
Product
Awesome Support
Affected
up to 6.1.7
What to do
Affects up to 6.1.7. Update Awesome Support to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 10, 2024WP Time Slots Booking Form: Missing AuthorizationCVE-2024-35735 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.
Product
WP Time Slots Booking Form
Affected
up to 1.2.11
What to do
Affects up to 1.2.11. Update WP Time Slots Booking Form to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.