The archive.

lunary-ai1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-7456 · lunary-ai lunary-ai/lunary

SQL Injection in lunary-ai/lunary

EPSS 1%public exploit CVSS 9.8

TOTOLINK1 vulnerability on this pageMax CVSS 9.1Priority 52KEV 0

CVE-2024-10654 · TOTOLINK LR350

TOTOLINK LR350 formLoginAuth.htm authorization

EPSS 2%public exploit CVSS 9.1

code-projects4 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-10608 · code-projects Courier Management System

code-projects Courier Management System login.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-10699 · code-projects Wazifa System

code-projects Wazifa System logincontrol.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-10700 · code-projects University Event Management System

code-projects University Event Management System submit.php sql injection

CVE-2024-10702 · code-projects Simple Car Rental System

code-projects Simple Car Rental System signup.php sql injection

Tongda11 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-10656 · Tongda OA 2017

Tongda OA 2017 apply.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-10615 · Tongda OA 2017

Tongda OA 2017 delete_data_attach.php sql injection

CVE-2024-10616 · Tongda OA

Tongda OA webSignSubmit.php sql injection

CVE-2024-10617 · Tongda OA

Tongda OA check_seal.php sql injection

CVE-2024-10618 · Tongda OA 2017

Tongda OA 2017 record_detail.php sql injection

CVE-2024-10619 · Tongda OA 2017

Tongda OA 2017 next_detail.php sql injection

CVE-2024-10655 · Tongda OA 2017

Tongda OA 2017 new.php sql injection

CVE-2024-10731 · Tongda OA

Tongda OA check_seal.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-10730 · Tongda OA

Tongda OA web_show.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-10657 · Tongda OA

Tongda OA prcs_info.php sql injection

EPSS 0.7%CVSS 9.8

CVE-2024-10658 · Tongda OA

Tongda OA check_seal.php sql injection

EPSS 0.7%CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10609 · itsourcecode Tailoring Management System Project

itsourcecode Tailoring Management System Project typeadd.php sql injection

YARPP1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-43919 · YARPP YARPP

WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability

EPSS 45%CVSS 9.8

WPDeveloper1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-47308 · WPDeveloper Templately

WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability

EPSS 2%CVSS 9.8

WebsiteinWP1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-43998 · WebsiteinWP Blogpoet

WordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability

EPSS 1%CVSS 9.8

Paid Memberships Pro1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-37277 · Paid Memberships Pro Paid Memberships Pro

WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability

EPSS 0.7%CVSS 9.8

Uncanny Owl1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-37119 · Uncanny Owl Uncanny Automator Pro

WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability

WPMU DEV - Your All-in-One WordPress Platform1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-37444 · WPMU DEV - Your All-in-One WordPress Platform Defender Security

WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability

ZAYTECH1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-43253 · ZAYTECH Smart Online Order for Clover

WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability

EPSS 0.6%CVSS 9.8

Arraytics1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43923 · Arraytics Timetics

WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability

CozyThemes4 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43341 · CozyThemes Hello Agency

WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability

CVE-2024-43974 · CozyThemes ReviveNews

WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability

CVE-2024-43979 · CozyThemes Blockbooster

WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerability

CVE-2024-43980 · CozyThemes Fota WP

WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability

ReviewX1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-43323 · ReviewX ReviewX

WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability

TheInnovs1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-38748 · TheInnovs EleForms

WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability

WofficeIO1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-37470 · WofficeIO Woffice Core

WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability

Caseproof, LLC1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-43956 · Caseproof, LLC Memberpress

WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability

CRM Perks1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-37463 · CRM Perks CRM Perks Forms

WordPress CRM Perks Forms plugin <= 1.1.5 - Broken Access Control vulnerability

Daniel Iser1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-47358 · Daniel Iser Popup Maker

WordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerability

eyecix1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-43929 · eyecix JobSearch

WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability

Fahad Mahmood1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-47321 · Fahad Mahmood WP Datepicker

WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability

JS Help Desk1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-43274 · JS Help Desk JS Help Desk – Best Help Desk & Support Plugin

WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

sunshinephotocart1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-44038 · sunshinephotocart Sunshine Photo Cart

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

WPWeb Elite1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-39650 · WPWeb Elite WooCommerce PDF Vouchers

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities

Kraft Plugins1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-47311 · Kraft Plugins Wheel of Life

WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability

Renzo Johnson1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-44019 · Renzo Johnson Contact Form 7 Campaign Monitor Extension

WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerability

Shahjahan Jewel1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-47302 · Shahjahan Jewel Fluent Support

WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability

StylemixThemes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2024-37094 · StylemixThemes MasterStudy LMS

WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability