Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)

๐Ÿ—“๏ธย 27 Jun 2024ย 15:00:22Reported byย Chloe ChamberlandTypeย 
wordfence
ย wordfence๐Ÿ”—ย www.wordfence.com๐Ÿ‘ย 179ย Views

Wordfence Weekly Vulnerability Report, June 17-23, 2024. 183 vulnerabilities in 135 WordPress Plugins, 14 Themes, 61 Researchers, Bug Bounty Program, Free Vulnerability Info Acces

Related
ReporterTitlePublishedViews
Family
vulnrichment
Vulnrichment		CVE-2024-37206 WordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
22 Jul 202409:31
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37207 WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability
1 Nov 202414:18
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37208 WordPress WP Scraper plugin <= 5.7 - Server Side Request Forgery (SSRF) vulnerability
6 Jul 202409:47
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37209 WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerability
1 Nov 202414:22
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37211 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
22 Jul 202409:30
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37212 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability
21 Jun 202413:45
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37213 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability
12 Jul 202413:27
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37214 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability
1 Nov 202414:18
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37215 WordPress Transition Slider โ€“ Responsive Image Slider and Gallery plugin <= 2.20.3 - Cross Site Scripting (XSS) vulnerability
22 Jul 202409:28
โ€“vulnrichment
vulnrichment
Vulnrichment		CVE-2024-37216 WordPress Sketchfab Embed plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
22 Jul 202409:27
โ€“vulnrichment
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
27 Jun 2024 15:00Current
10High risk
Vulners AI Score10
CVSS 3.110
EPSS0.04186
SSVC
wordfencewordpressbug bountyvulnerabilitiessecurityfirewallpremiumcareresponseapiwebhook
179