Browse CVEs

HIGH 8.8 CVE-2024-5431 The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclu… Wpcafe 2.2.26+ Fix from $1,9502024-06-25 HIGH 8.8 CVE-2024-5455 The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.5.4 via… The Plus Addons For Elementor 5.6.0+ Fix from $1,9502024-06-21 HIGH 8.8 CVE-2024-5503 The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3. This makes it possib… Wp Blog Post Layouts after 1.1.3 Fix from $1,9502024-06-21 HIGH 7.5 CVE-2024-5574 The WP Magazine Modules Lite plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'blockLay… Mitigation only Fix from $1,9502024-06-19 CRITICAL 9.8 CVE-2024-4258 The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and… Video Gallery 1.3.14+ Fix from $2,3002024-06-15 HIGH 8.8 CVE-2024-4551 The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and… Video Gallery 1.3.14+ Fix from $1,9502024-06-15 HIGH 8.8 CVE-2024-3813 The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8 via the 'td_block_title' sho… Tagdiv Composer 4.9+ Fix from $1,9502024-06-15 CRITICAL 9.8 CVE-2024-5577 The Where I Was, Where I Will Be plugin for WordPress is vulnerable to Remote File Inclusion in version <= 1.1.1 via the WIW_HEADER parameter of the … Mitigation only Fix from $2,3002024-06-14 CRITICAL 9.8 CVE-2024-4936 The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This mak… Canto 3.0.9+ Fix from $2,3002024-06-14 HIGH 8.8 CVE-2024-36415 SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in upload… Suitecrm 7.14.4 / 8.6.1+ Fix from $1,9502024-06-10 HIGH 7.2 CVE-2024-35650 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Melapress MelaPress Login Se… Melapress Login Security 1.3.1+ Fix from $1,9502024-06-10 HIGH 7.5 CVE-2024-4887 The Qi Addons For Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.2 via the 'behavior'… Qi Addons For Elementor 1.7.3+ Fix from $1,9502024-06-07 CRITICAL 9.8 CVE-2024-35629 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Easy Digital Dow… Easy Digital Downloads after 1.0.2 Fix from $2,3002024-06-04 HIGH 8.1 CVE-2024-36569 Sourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via editClientImage.php. Gas Agency Management System No fix yet Fix from $1,9502024-06-03 HIGH 8.8 CVE-2024-5348 The Elements For Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.1 via the 'beforeafter_… Mitigation only Fix from $1,9502024-06-01 HIGH 8.8 CVE-2024-3564 The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via th… Content Blocks 3.3.1+ Fix from $1,9502024-06-01 HIGH 8.8 CVE-2024-5345 The Responsive Owl Carousel for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2.0 via … Mitigation only Fix from $1,9502024-05-31 HIGH 7.5 CVE-2024-3812 The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortco… Mitigation only Fix from $1,9502024-05-18 HIGH 8.8 CVE-2024-3810 The Salient Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.3 via the 'icon' shortcod… Mitigation only Fix from $1,9502024-05-18 HIGH 8.1 CVE-2024-32523 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in EverPress Mailster mailster.… Mitigation only Fix from $1,9502024-05-17 HIGH 8.3 CVE-2024-27971 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Permalin… Mitigation only Fix from $1,9502024-05-17 CRITICAL 9.8 CVE-2024-3551 The Penci Soledad Data Migrator plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.0 via the 'data'… Mitigation only Fix from $2,3002024-05-17 HIGH 8.8 CVE-2024-4670 The All-in-One Video Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.5 via the aiovg_sea… Mitigation only Fix from $1,9502024-05-15 CRITICAL 9.8 CVE-2024-33863 An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion. Linqi 1.4.0.1+ Fix from $2,3002024-05-14 HIGH 8.1 CVE-2024-4441 The XML Sitemap & Google News plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.8 via the 'feed' p… Mitigation only Fix from $1,9502024-05-14 HIGH 8.8 CVE-2024-3809 The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.9 via the 'slide… Mitigation only Fix from $1,9502024-05-14 CRITICAL 9.8 CVE-2024-3806 The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. … Mitigation only Fix from $2,3002024-05-14 HIGH 8.8 CVE-2024-3807 The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via 'porto_page_header_shortcode_type… Mitigation only Fix from $1,9502024-05-14 HIGH 8.8 CVE-2024-3808 The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the 'porto… Mitigation only Fix from $1,9502024-05-14 HIGH 7.2 CVE-2024-31459 Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, there is a file inclusion issue in the `lib/plugin.… Fedora 1.2.27+ Fix from $1,9502024-05-14