Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,767exploited flaws on CISA’s list

33added in the last 30 days

563new WordPress flaws this week

392,577entries in the database

6,284 results · page 101 of 126

Jun 12, 2024Simple Org Chart: Missing AuthorizationCVE-2023-40603 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through 2.3.4.
Product
Simple Org Chart
Affected
up to 2.3.4
What to do
Affects up to 2.3.4. Update Simple Org Chart to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024Highcompress Image Compressor: Missing AuthorizationCVE-2023-40209 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0.
Product
Highcompress Image Compressor
Affected
up to 6.0.0
What to do
Affects up to 6.0.0. Update Highcompress Image Compressor to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024WP Clone Menu: Missing AuthorizationCVE-2023-38395 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in Afzal Multani WP Clone Menu.This issue affects WP Clone Menu: from n/a through 1.0.1.
Product
WP Clone Menu
Affected
up to 1.0.1
What to do
Affects up to 1.0.1. Update WP Clone Menu to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024Buy Me a Coffee: Missing AuthorizationCVE-2023-25030 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7.
Product
Buy Me a Coffee
Affected
up to 3.7
What to do
Affects up to 3.7. Update Buy Me a Coffee to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024WordPress Header Builder Plugin – Pearl: Unauthorized site option deletionCVE-2024-5468 · WordPress plugins & themes · reported by WordfenceMedium 6.5
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stm_hb_delete() function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to delete arbitrary options that can be used to perform a denial of service attack on a site.
Product
WordPress Header Builder Plugin – Pearl
Affected
up to 1.3.7
What to do
Affects up to 1.3.7. Update WordPress Header Builder Plugin – Pearl to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record plugins.trac.wordpress.org wordfence.com
Jun 12, 2024Integrate Google Drive: Missing AuthorizationCVE-2023-52177 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3.
Product
Integrate Google Drive
Affected
up to 1.3.3
What to do
Affects up to 1.3.3. Update Integrate Google Drive to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024ProfileGrid: Missing AuthorizationCVE-2023-52117 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6.
Product
ProfileGrid
Affected
up to 5.6.6
What to do
Affects up to 5.6.6. Update ProfileGrid to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024Quotes for WooCommerce: Missing AuthorizationCVE-2023-51680 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in TechnoVama Quotes for WooCommerce.This issue affects Quotes for WooCommerce: from n/a through 2.0.1.
Product
Quotes for WooCommerce
Affected
up to 2.0.1
What to do
Affects up to 2.0.1. Update Quotes for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024BulkGate SMS Plugin for WooCommerce: Missing AuthorizationCVE-2023-51679 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in BulkGate BulkGate SMS Plugin for WooCommerce.This issue affects BulkGate SMS Plugin for WooCommerce: from n/a through 3.0.2.
Product
BulkGate SMS Plugin for WooCommerce
Affected
up to 3.0.2
What to do
Affects up to 3.0.2. Update BulkGate SMS Plugin for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024FunnelKit Checkout: Missing AuthorizationCVE-2023-51671 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.
Product
FunnelKit Checkout
Affected
up to 3.10.3
What to do
Affects up to 3.10.3. Update FunnelKit Checkout to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024FunnelKit Checkout: Missing AuthorizationCVE-2023-51670 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.
Product
FunnelKit Checkout
Affected
up to 3.10.3
What to do
Affects up to 3.10.3. Update FunnelKit Checkout to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024Awesome Support: Missing AuthorizationCVE-2023-51537 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.5.
Product
Awesome Support
Affected
up to 6.1.5
What to do
Affects up to 6.1.5. Update Awesome Support to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 12, 2024Simple Staff List: Missing AuthorizationCVE-2023-51526 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4.
Product
Simple Staff List
Affected
up to 2.2.4
What to do
Affects up to 2.2.4. Update Simple Staff List to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Import and export users and customers: Missing AuthorizationCVE-2024-34815 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through <= 1.26.5.
Product
Import and export users and customers
Affected
up to 1.26.5
What to do
Affects up to 1.26.5. Update Import and export users and customers to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Tagembed: Missing AuthorizationCVE-2024-34804 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8.
Product
Tagembed
Affected
up to 5.8
What to do
Affects up to 5.8. Update Tagembed to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024BookingPress: Missing AuthorizationCVE-2024-34799 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82.
Product
BookingPress
Affected
up to 1.0.82
What to do
Affects up to 1.0.82. Update BookingPress to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Fastly: Missing AuthorizationCVE-2024-34768 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.
Product
Fastly
Affected
up to 1.2.25
What to do
Affects up to 1.2.25. Update Fastly to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Builder for WooCommerce reviews shortcodes – ReviewShort: Missing AuthorizationCVE-2024-34763 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through <= 1.01.5.
Product
Builder for WooCommerce reviews shortcodes – ReviewShort
Affected
up to 1.01.5
What to do
Affects up to 1.01.5. Update Builder for WooCommerce reviews shortcodes – ReviewShort to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WP Fundraising Donation and Crowdfunding Platform: Missing AuthorizationCVE-2024-34758 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4.
Product
WP Fundraising Donation and Crowdfunding Platform
Affected
up to 1.6.4
What to do
Affects up to 1.6.4. Update WP Fundraising Donation and Crowdfunding Platform to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Aspose.Words Exporter: Missing AuthorizationCVE-2024-32146 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Aspose.Cloud Marketplace Aspose.Words Exporter.This issue affects Aspose.Words Exporter: from n/a through 6.3.1.
Product
Aspose.Words Exporter
Affected
up to 6.3.1
What to do
Affects up to 6.3.1. Update Aspose.Words Exporter to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Podlove Podcast Publisher: Missing AuthorizationCVE-2024-32143 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0.
Product
Podlove Podcast Publisher
Affected
up to 4.1.0
What to do
Affects up to 4.1.0. Update Podlove Podcast Publisher to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024ACF Photo Gallery Field: Missing AuthorizationCVE-2024-23518 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6.
Product
ACF Photo Gallery Field
Affected
up to 2.6
What to do
Affects up to 2.6. Update ACF Photo Gallery Field to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MailerLite – WooCommerce integration: Missing AuthorizationCVE-2023-52227 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8.
Product
MailerLite – WooCommerce integration
Affected
up to 2.0.8
What to do
Affects up to 2.0.8. Update MailerLite – WooCommerce integration to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Revolut Gateway for WooCommerce: Missing AuthorizationCVE-2023-52224 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7.
Product
Revolut Gateway for WooCommerce
Affected
up to 4.9.7
What to do
Affects up to 4.9.7. Update Revolut Gateway for WooCommerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Preloader for Website: Missing AuthorizationCVE-2023-48273 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2.
Product
Preloader for Website
Affected
up to 1.2.2
What to do
Affects up to 1.2.2. Update Preloader for Website to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024weMail: Missing AuthorizationCVE-2024-34822 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2.
Product
weMail
Affected
up to 1.14.2
What to do
Affects up to 1.14.2. Update weMail to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Contact List: Missing AuthorizationCVE-2024-34821 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87.
Product
Contact List
Affected
up to 2.9.87
What to do
Affects up to 2.9.87. Update Contact List to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MC Woocommerce Wishlist: Missing AuthorizationCVE-2024-34819 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.
Product
MC Woocommerce Wishlist
Affected
up to 1.7.2
What to do
Affects up to 1.7.2. Update MC Woocommerce Wishlist to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Radio Player: Missing AuthorizationCVE-2024-34753 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
Product
Radio Player
Affected
up to 2.0.73
What to do
Affects up to 2.0.73. Update Radio Player to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Welcart e-Commerce: Missing AuthorizationCVE-2024-32144 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.
Product
Welcart e-Commerce
Affected
up to 2.9.14
What to do
Affects up to 2.9.14. Update Welcart e-Commerce to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Happyforms: Missing AuthorizationCVE-2024-23521 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10.
Product
Happyforms
Affected
up to 1.25.10
What to do
Affects up to 1.25.10. Update Happyforms to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Ninja Tables: Missing AuthorizationCVE-2024-23503 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.
Product
Ninja Tables
Affected
up to 5.0.6
What to do
Affects up to 5.0.6. Update Ninja Tables to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Post SMTP Mailer/Email Log: Missing AuthorizationCVE-2023-52233 · WordPress plugins & themes · reported by PatchstackHigh 8.6
Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6.
Product
Post SMTP Mailer/Email Log
Affected
up to 2.8.6
What to do
Affects up to 2.8.6. Update Post SMTP Mailer/Email Log to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MC4WP: Missing AuthorizationCVE-2023-51682 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9.
Product
MC4WP
Affected
up to 4.9.9
What to do
Affects up to 4.9.9. Update MC4WP to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Slider by Soliloquy: Missing AuthorizationCVE-2023-51519 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2.
Product
Slider by Soliloquy
Affected
up to 2.7.2
What to do
Affects up to 2.7.2. Update Slider by Soliloquy to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WP EasyCart: Missing AuthorizationCVE-2024-35667 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19.
Product
WP EasyCart
Affected
up to 5.5.19
What to do
Affects up to 5.5.19. Update WP EasyCart to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Insert Post Ads: Missing AuthorizationCVE-2024-35665 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert Post Ads: from n/a through 1.3.2.
Product
Insert Post Ads
Affected
up to 1.3.2
What to do
Affects up to 1.3.2. Update Insert Post Ads to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WP Translate: Missing AuthorizationCVE-2024-35663 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0.
Product
WP Translate
Affected
up to 5.3.0
What to do
Affects up to 5.3.0. Update WP Translate to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Photo Gallery by 10Web: Missing AuthorizationCVE-2024-35628 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.
Product
Photo Gallery by 10Web
Affected
up to 1.8.25
What to do
Affects up to 1.8.25. Update Photo Gallery by 10Web to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WP Discourse: Missing AuthorizationCVE-2024-35168 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1.
Product
WP Discourse
Affected
up to 2.5.1
What to do
Affects up to 2.5.1. Update WP Discourse to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024CF7 WOW Styler: Missing AuthorizationCVE-2024-34826 · WordPress plugins & themes · reported by PatchstackMedium 6.3
Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4.
Product
CF7 WOW Styler
Affected
up to 1.6.4
What to do
Affects up to 1.6.4. Update CF7 WOW Styler to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024If-So Dynamic Content Personalization: Missing AuthorizationCVE-2024-34820 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a through 1.7.1.
Product
If-So Dynamic Content Personalization
Affected
up to 1.7.1
What to do
Affects up to 1.7.1. Update If-So Dynamic Content Personalization to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Pardot: Missing AuthorizationCVE-2024-32148 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0.
Product
Pardot
Affected
up to 2.1.0
What to do
Affects up to 2.1.0. Update Pardot to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WC Marketplace: Missing AuthorizationCVE-2024-24703 · WordPress plugins & themes · reported by PatchstackHigh 8.6
Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25.
Product
WC Marketplace
Affected
up to 4.0.25
What to do
Affects up to 4.0.25. Update WC Marketplace to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024ActivityPub: Missing AuthorizationCVE-2023-52199 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue affects ActivityPub: from n/a through 1.0.5.
Product
ActivityPub
Affected
up to 1.0.5
What to do
Affects up to 1.0.5. Update ActivityPub to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WooCommerce Canada Post Shipping: Missing AuthorizationCVE-2023-51498 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3.
Product
WooCommerce Canada Post Shipping
Affected
up to 2.8.3
What to do
Affects up to 2.8.3. Update WooCommerce Canada Post Shipping to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024Leyka: Missing AuthorizationCVE-2024-35683 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1.
Product
Leyka
Affected
up to 3.31.1
What to do
Affects up to 3.31.1. Update Leyka to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024MJ Update History: Missing AuthorizationCVE-2024-35671 · WordPress plugins & themes · reported by PatchstackMedium 4.3
Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update History: from n/a through 1.0.4.
Product
MJ Update History
Affected
up to 1.0.4
What to do
Affects up to 1.0.4. Update MJ Update History to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024weDocs: Missing AuthorizationCVE-2024-34442 · WordPress plugins & themes · reported by PatchstackMedium 5.3
Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4.
Product
weDocs
Affected
up to 2.1.4
What to do
Affects up to 2.1.4. Update weDocs to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com
Jun 11, 2024WordPress Backup & Migration: Missing AuthorizationCVE-2023-52183 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3.
Product
WordPress Backup & Migration
Affected
up to 1.4.3
What to do
Affects up to 1.4.3. Update WordPress Backup & Migration to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD record patchstack.com patchstack.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.