[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424398
> CVE-2024-43974 [MEDIUM 6.5]
Missing Authorization vulnerability in CozyThemes ReviveNews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReviveNews: from n/a through 1.0.2.
AFFECTED_PRODUCTS: Cozythemes Revivenews
> CVE-2024-43973 [MEDIUM 4.3]
Missing Authorization vulnerability in AyeCode Ltd GetPaid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through 2.8.11.
AFFECTED_PRODUCTS: Ayecode Getpaid
> CVE-2024-43968 [MEDIUM 4.3]
Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6.
AFFECTED_PRODUCTS: Newspack Newspack
> CVE-2024-43962 [MEDIUM 5.4]
Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.
AFFECTED_PRODUCTS: Lws Affiliation
> CVE-2024-43956 [MEDIUM 6.5]
Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpress: from n/a through 1.11.34.
AFFECTED_PRODUCTS: Caseproof Memberpress
> CVE-2024-43937 [MEDIUM 6.4]
Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10.
AFFECTED_PRODUCTS: Themeum Wp Crowdfunding
> CVE-2024-43932 [MEDIUM 6.5]
Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.6.2.
AFFECTED_PRODUCTS: Posimyth The Plus Addons For Elementor
> CVE-2024-43929 [MEDIUM 6.5]
Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4.
AFFECTED_PRODUCTS: Eyecix Jobsearch Wp Job Board
> CVE-2024-43928 [MEDIUM 5.4]
Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4.
AFFECTED_PRODUCTS: Eyecix Jobsearch Wp Job Board
> CVE-2024-43925 [MEDIUM 4.3]
Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.14.
AFFECTED_PRODUCTS: Enviragallery Envira Gallery
> CVE-2024-43923 [MEDIUM 5.3]
Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a through 1.0.23.
AFFECTED_PRODUCTS: Arraytics Wp Timetics
> CVE-2024-43919 [MEDIUM 5.3]
Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10.
AFFECTED_PRODUCTS: Yarpp Yet Another Related Posts Plugin
> CVE-2024-43355 [MEDIUM 4.3]
Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.
AFFECTED_PRODUCTS: Beardev Joomsport
> CVE-2024-43343 [MEDIUM 4.3]
Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12.
AFFECTED_PRODUCTS: Etoilewebdesign Order Tracking
> CVE-2024-43341 [MEDIUM 6.5]
Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5.
AFFECTED_PRODUCTS: Cozythemes Hello Agency
> CVE-2024-43332 [MEDIUM 4.3]
Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.
AFFECTED_PRODUCTS: Meowapps Photo Engine
> CVE-2024-43323 [MEDIUM 5.3]
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28.
AFFECTED_PRODUCTS: Wpdeveloper Reviewx
> CVE-2024-43314 [MEDIUM 4.3]
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3.
AFFECTED_PRODUCTS: Gabelivan Asset Cleanup
> CVE-2024-43312 [MEDIUM 5.4]
Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.1.9.
AFFECTED_PRODUCTS: Wpclever Wpc Frequently Bought Together For Woocommerce
> CVE-2024-43310 [MEDIUM 6.5]
Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9.
AFFECTED_PRODUCTS: Ukrsolution Print Labels With Barcodes
> CVE-2024-43302 [MEDIUM 4.3]
Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fonts: from n/a through 3.7.7.
AFFECTED_PRODUCTS: Fontsplugin Fonts
> CVE-2024-43298 [MEDIUM 4.3]
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
AFFECTED_PRODUCTS: Backupbliss Clone
> CVE-2024-43297 [MEDIUM 4.3]
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
AFFECTED_PRODUCTS: Backupbliss Clone
> CVE-2024-43296 [MEDIUM 4.3]
Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5 Video: from n/a through 2.5.30.
AFFECTED_PRODUCTS: Bplugins Html5 Video Player
> CVE-2024-43293 [MEDIUM 4.3]
Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through 3.3.1.
AFFECTED_PRODUCTS: Wpzoom Recipe Card Blocks For Gutenberg \& Elementor
> CVE-2024-43290 [MEDIUM 5.3]
Missing Authorization vulnerability in Atarim allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Atarim: from n/a through 4.0.1.
> CVE-2024-43285 [MEDIUM 6.3]
Missing Authorization vulnerability in Presto Made, Inc Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Presto Player: from n/a through 3.0.2.
> CVE-2024-43277 [MEDIUM 5.3]
Missing Authorization vulnerability in AyeCode Ltd UsersWP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.15.
> CVE-2024-43274 [MEDIUM 5.8]
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.
> CVE-2024-43273 [MEDIUM 5.4]
Missing Authorization vulnerability in icegram Icegram Collect plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegram Collect plugin: from n/a through 1.3.14.
> CVE-2024-43270 [MEDIUM 5.3]
Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Backup and Restore WordPress: from n/a through 1.50.
> CVE-2024-43268 [MEDIUM 5.4]
Access Control vulnerability in WPBackItUp Backup and Restore WordPress allows . This issue affects Backup and Restore WordPress: from n/a through 1.50.
> CVE-2024-43260 [MEDIUM 5.4]
Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clearfy Cache: from n/a through 2.2.4.
> CVE-2024-43254 [MEDIUM 4.3]
Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Online Order for Clover: from n/a through 1.5.6.
AFFECTED_PRODUCTS: Zaytech Smart Online Order For Clover
> CVE-2024-43253 [MEDIUM 5.3]
Missing Authorization vulnerability in Zaytech Smart Online Order for Clover allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Smart Online Order for Clover: from n/a through 1.5.6.
AFFECTED_PRODUCTS: Zaytech Smart Online Order For Clover
> CVE-2024-43235 [HIGH 7.1]
Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.9.10.
> CVE-2024-43229 [MEDIUM 4.3]
Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Search Analytics: from n/a through 1.4.9.
> CVE-2024-43223 [MEDIUM 4.3]
Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 4.0.3.2.
AFFECTED_PRODUCTS: Metagauss Eventprime
> CVE-2024-43219 [MEDIUM 5.3]
Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6.
> CVE-2024-43215 [MEDIUM 4.3]
Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Slider Feed: from n/a through 2.2.2.
> CVE-2024-43212 [HIGH 7.5]
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.
> CVE-2024-43211 [MEDIUM 5.9]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9.
> CVE-2024-43209 [MEDIUM 6.5]
Missing Authorization vulnerability in Bitly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bitly: from n/a through 2.7.2.
> CVE-2024-43208 [MEDIUM 4.3]
Missing Authorization vulnerability in Miller Media ( Matt Miller ) Send Emails with Mandrill allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Send Emails with Mandrill: from n/a through 1.4.1.
> CVE-2024-43162 [MEDIUM 4.3]
Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.2.12.
AFFECTED_PRODUCTS: Awesomemotive Easy Digital Downloads
> CVE-2024-43159 [MEDIUM 5.3]
Missing Authorization vulnerability in Masteriyo Masteriyo - LMS allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masteriyo - LMS: from n/a through 1.11.6.
AFFECTED_PRODUCTS: Masteriyo Masteriyo
> CVE-2024-43158 [HIGH 7.5]
Missing Authorization vulnerability in Masteriyo Masteriyo - LMS allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Masteriyo - LMS: from n/a through 1.11.4.
AFFECTED_PRODUCTS: Masteriyo Masteriyo
> CVE-2024-43157 [MEDIUM 4.3]
Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft: from n/a through 1.2.10.
> CVE-2024-43154 [MEDIUM 4.3]
Missing Authorization vulnerability in BracketSpace Advanced Cron Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Cron Manager – debug & control: from n/a through 2.5.9.
> CVE-2024-43146 [MEDIUM 6.3]
Missing Authorization vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AMP for WP: from n/a through 1.0.96.1.