Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)

🗓️ 25 Jul 2024 14:49:51Reported by Chloe ChamberlandType

Wordfence's weekly report reveals 71 vulnerabilities in 60 WordPress plugins and 2 themes, ranging from low to critical severity, with 12 unpatched vulnerabilities

Reporter	Title	Published	Views	Family All 1018
Vulnrichment	CVE-2024-6694 WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure	20 Jul 202403:20	–	vulnrichment
Vulnrichment	CVE-2024-6705 RegLevel <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting	18 Jul 202402:03	–	vulnrichment
Vulnrichment	CVE-2024-6710 Ditty < 3.1.45 - Author+ Stored XSS	5 Aug 202406:00	–	vulnrichment
Vulnrichment	CVE-2024-6720 Light Poll <= 1.0.0 - Poll Answers Deletion via CSRF	6 Aug 202415:28	–	vulnrichment
Vulnrichment	CVE-2024-6766 Shortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSS	6 Aug 202406:00	–	vulnrichment
Vulnrichment	CVE-2024-6799 YITH Essential Kit for WooCommerce #1 <= 2.34.0 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install, Activation, and Deactivation	19 Jul 202407:36	–	vulnrichment
Vulnrichment	CVE-2024-6848 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload	20 Jul 202411:18	–	vulnrichment
Vulnrichment	CVE-2024-6884 Gutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSS	8 Aug 202406:00	–	vulnrichment
Vulnrichment	CVE-2024-7082 easy-table-of-contents < 2.0.68 - Editor+ Stored XSS	6 Aug 202406:00	–	vulnrichment
Vulnrichment	CVE-2024-7084 Ajax Search Lite < 4.12.1 - Admin+ Stored XSS	6 Aug 202406:00	–	vulnrichment

25 Jul 2024 14:49Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

EPSS0.35463

SSVC