The archive.

CVE-2024-5065 · PHPGurukul Online Course Registration System

PHPGurukul Online Course Registration System sql injection

pisay_online_e-learning_system_project1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-34919 · pisay_online_e-learning_system_project pisay_online_e-learning_system

An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0…

EPSS 0.9%public exploit CVSS 9.8

By Averta1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-37888 · By Averta Shortcodes and extra features for Phlox theme

WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability

EPSS 0.7%public exploit CVSS 9.8

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-5048 · code-projects Budget Management

code-projects Budget Management index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

POSIMYTH Innovation1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-47178 · POSIMYTH Innovation The Plus Addons for Elementor Pro

WordPress The Plus Addons for Elementor Pro plugin <= 5.2.8 - Unauthenticated Local File Inclusion vulnerability

EPSS 0.7%public exploit CVSS 9.8

SourceCodester5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-5069 · SourceCodester Simple Online Mens Salon Management System

SourceCodester Simple Online Mens Salon Management System view_service.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-5047 · SourceCodester Student Management System

SourceCodester Student Management System controller.php unrestricted upload

EPSS 0.9%CVSS 9.8

CVE-2024-5046 · SourceCodester Online Examination System

SourceCodester Online Examination System registeracc.php sql injection

CVE-2024-5093 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System login.php sql injection

CVE-2024-5094 · SourceCodester Best House Rental Management System

SourceCodester Best House Rental Management System view_payment.php sql injection

LWS1 vulnerability on this pageMax CVSS 9.0Priority 48KEV 0

CVE-2023-32297 · LWS LWS Affiliation

WordPress LWS Affiliation plugin <= 2.2.6 - Local File Inclusion vulnerability

EPSS 0.8%public exploit CVSS 9.0

Favethemes2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-26009 · Favethemes Houzez Login Register

WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation

CVE-2023-26540 · Favethemes Houzez

WordPress Houzez theme <= 2.7.1 - Privilege Escalation

HasThemes1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-37999 · HasThemes HT Mega

WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability

techjewel1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-2771 · techjewel Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation

masteriyo1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-24882 · masteriyo Masteriyo - LMS

WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

EPSS 2%CVSS 9.8

WPCustomify1 vulnerability on this pageMax CVSS 9.9Priority 43KEV 0

CVE-2024-33644 · WPCustomify Customify Site Library

WordPress Customify Site Library plugin <= 0.0.9 - Remote Code Execution (RCE) vulnerability

EPSS 1%CVSS 9.9

kiteworks1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-28064 · kiteworks totemomail

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated…

EPSS 0.9%CVSS 9.8

Linux8 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-35845 · Linux Linux

wifi: iwlwifi: dbg-tlv: ensure NUL termination

EPSS 1%CVSS 9.1

CVE-2024-35861 · Linux Linux

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

CVE-2024-35862 · Linux Linux

smb: client: fix potential UAF in smb2_is_network_name_deleted()

CVE-2024-35863 · Linux Linux

smb: client: fix potential UAF in is_valid_oplock_break()

CVE-2024-35864 · Linux Linux

smb: client: fix potential UAF in smb2_is_valid_lease_break()

CVE-2024-35865 · Linux Linux

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

CVE-2024-35869 · Linux Linux

smb: client: guarantee refcounted children from parent session

CVE-2023-52687 · Linux Linux

crypto: safexcel - Add error handling for dma_map_sg() calls

smp7, wp.insider1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-41957 · smp7, wp.insider Simple Membership

WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability

EPSS 0.8%CVSS 9.8

WhatArmy1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-25701 · WhatArmy WatchTowerHQ

WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation

EPSS 0.8%CVSS 9.8

xtemos1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-32244 · xtemos Woodmart Core

WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation

EPSS 0.8%CVSS 9.8

Saleswonder Team1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-51424 · Saleswonder Team WebinarIgnition

WordPress WebinarIgnition plugin <= 3.05.0 - Unauthenticated Privilege Escalation vulnerability

8theme1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-33552 · 8theme XStore Core

WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability

Glowlogix1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-51483 · Glowlogix WP Frontend Profile

WordPress WP Frontend Profile plugin <= 1.3.1 - Unauthenticated Privilege Escalation vulnerability

IOSS1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-51476 · IOSS WP MLM Unilevel

WordPress WP MLM Unilevel plugin <= 4.0 - Unauthenticated Account Takeover vulnerability

JumpDEMAND Inc.1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-32809 · JumpDEMAND Inc. ActiveDEMAND

WordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

powerfulwp1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-51481 · powerfulwp Local Delivery Drivers for WooCommerce

WordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability

WebWizards1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-22157 · WebWizards SalesKing

WordPress SalesKing plugin <= 1.6.15 - Unauthenticated Privilege Escalation vulnerability

Wholesale1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-30542 · Wholesale WholesaleX

WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated Privilege Escalation vulnerability

Astoundify1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-32511 · Astoundify Simple Registration for WooCommerce

WordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability

CodeRevolution1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-31290 · CodeRevolution Demo My WordPress

WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability

UkrSolution1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-33567 · UkrSolution Barcode Scanner with Inventory & Order Manager

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.3 - Unauthenticated Privilege Escalation vulnerability

wpForo1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-47868 · wpForo wpForo Forum

WordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerability

Sizam Design1 vulnerability on this pageMax CVSS 9.0Priority 37KEV 0

CVE-2024-31231 · Sizam Design Rehub

WordPress Rehub theme <= 19.6.1 - Unauthenticated Local File Inclusion vulnerability

EPSS 0.6%CVSS 9.0

WP Royal1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-32786 · WP Royal Royal Elementor Addons

WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability