Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)

🗓️ 27 Jun 2024 15:00:22Reported by Chloe ChamberlandType

Wordfence Weekly Vulnerability Report, June 17-23, 2024. 183 vulnerabilities in 135 WordPress Plugins, 14 Themes, 61 Researchers, Bug Bounty Program, Free Vulnerability Info Acces

Reporter	Title	Published	Views	Family All 2129
Vulnrichment	CVE-2024-37203 WordPress Laybuy Payment Extension for WooCommerce plugin <= 5.3.9 - Broken Access Control vulnerability	1 Nov 202414:18	–	vulnrichment
Vulnrichment	CVE-2024-37204 WordPress PropertyHive plugin <= 2.0.9 - Broken Access Control vulnerability	1 Nov 202414:18	–	vulnrichment
Vulnrichment	CVE-2024-37205 WordPress affiliate-toolkit plugin <= 3.4.4 - Sensitive Data Exposure via Log File vulnerability	10 Jul 202417:50	–	vulnrichment
Vulnrichment	CVE-2024-37206 WordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	22 Jul 202409:31	–	vulnrichment
Vulnrichment	CVE-2024-37207 WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability	1 Nov 202414:18	–	vulnrichment
Vulnrichment	CVE-2024-37208 WordPress WP Scraper plugin <= 5.7 - Server Side Request Forgery (SSRF) vulnerability	6 Jul 202409:47	–	vulnrichment
Vulnrichment	CVE-2024-37209 WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerability	1 Nov 202414:22	–	vulnrichment
Vulnrichment	CVE-2024-37211 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerability	22 Jul 202409:30	–	vulnrichment
Vulnrichment	CVE-2024-37212 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability	21 Jun 202413:45	–	vulnrichment
Vulnrichment	CVE-2024-37213 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability	12 Jul 202413:27	–	vulnrichment

27 Jun 2024 15:00Current

10High risk

Vulners AI Score10

CVSS 3.110

EPSS0.04186

SSVC