Wordfence Intelligence Weekly WordPress Vulnerability Report (August 5, 2024 to August 11, 2024)


📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 14th, researchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest. 


Last week, there were 140 vulnerabilities disclosed in 118 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 52 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.

Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.

Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 18,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.


New Firewall Rules Deployed Last Week

The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.

The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our PremiumCare, and Response customers last week:

Wordfence PremiumCare, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.


Total Unpatched & Patched Vulnerabilities Last Week

Patch Status Number of Vulnerabilities
Patched 110
Unpatched 30


Total Vulnerabilities by CVSS Severity Last Week

Severity Rating Number of Vulnerabilities
Low Severity 1
Medium Severity 106
High Severity 20
Critical Severity 13


Total Vulnerabilities by CWE Type Last Week

Vulnerability Type by CWE Number of Vulnerabilities
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 56
Missing Authorization 28
Exposure of Sensitive Information to an Unauthorized Actor 11
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 10
Cross-Site Request Forgery (CSRF) 9
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 9
Deserialization of Untrusted Data 4
Unrestricted Upload of File with Dangerous Type 3
Authentication Bypass Using an Alternate Path or Channel 2
Improper Input Validation 2
Authorization Bypass Through User-Controlled Key 1
Improper Control of Generation of Code ('Code Injection') 1
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 1
Improper Privilege Management 1
Server-Side Request Forgery (SSRF) 1
URL Redirection to Untrusted Site ('Open Redirect') 1


Researchers That Contributed to WordPress Security Last Week

Researcher Name Number of Vulnerabilities
11
10
9
7
7
6
5
5
4
4
4
4
3
3
3
3
3
3
3
3
2
2
2
2
2
2
2
2
2
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.


WordPress Plugins with Reported Vulnerabilities Last Week

Software Name Software Slug
140+ Widgets | Xpro Addons For Elementor – FREE xpro-elementor-addons
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery interactive-3d-flipbook-powered-physics-engine
Accept Stripe Payments stripe-payments
Advanced Cron Manager – debug & control advanced-cron-manager
affiliate-toolkit affiliate-toolkit-starter
AMP for WP – Accelerated Mobile Pages accelerated-mobile-pages
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress bookingpress-appointment-booking
Aruba HiSpeed Cache aruba-hispeed-cache
BerqWP – Automated All-In-One PageSpeed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript searchpro
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg betterdocs
Bitly's WordPress Plugin wp-bitly
Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed blockspare
Blox Page Builder blox-page-builder
Booking for Appointments and Events Calendar – Amelia ameliabooking
Brizy – Page Builder brizy
BSK Forms Blacklist bsk-gravityforms-blacklist
Card Elements for Elementor card-elements-for-elementor
Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot chatbot-support-ai
Christmasify! christmasify
CM Tooltip Glossary enhanced-tooltipglossary
Cost Calculator Builder cost-calculator-builder
CRM Perks Forms – WordPress Form Builder crm-perks-forms
DL Robots.txt dl-robotstxt
DL Verification dl-verification
DL Yandex Metrika dl-yandex-metrika
Docket (WooCommerce Collections / Wishlist / Watchlist) woocommerce-collections
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy easy-digital-downloads
Easy PayPal & Stripe Buy Now Button wp-ecommerce-paypal
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) bdthemes-element-pack-lite
Enter Addons – Ultimate Template Builder for Elementor enteraddons
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin mage-eventpress
EventPrime – Events Calendar, Bookings and Tickets eventprime-event-calendar-management
Falang multilanguage for WordPress falang
Filr – Secure document library filr-protection
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager folders
Football Pool football-pool
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder form-maker
FormCraft – Form Builder formcraft-form-builder
Fuse Social Floating Sidebar fuse-social-floating-sidebar
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory geodirectory
Graphina – Elementor Charts and Graphs graphina-elementor-charts-and-graphs
Horizontal scrolling announcements horizontal-scrolling-announcements
Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN hummingbird-performance
HUSKY – Products Filter Professional for WooCommerce woocommerce-products-filter
Import and export users and customers import-users-from-csv-with-meta
JetGridBuilder — Grid Builder for Elementor and Gutenberg jetgridbuilder
Kodex Posts likes kodex-posts-likes
LA-Studio Element Kit for Elementor lastudio-element-kit
LearnPress – WordPress LMS Plugin learnpress
Lightbox & Modal Popup WordPress Plugin – FooBox foobox-image-lightbox
Linkify Text linkify-text
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder mailchimp-subscribe-sm
MainWP Child Reports mainwp-child-reports
Masteriyo LMS – eLearning and Online Course Builder for WordPress learning-management-system
Mediavine Control Panel mediavine-control-panel
Meta Box – WordPress Custom Fields Framework meta-box
Modern Events Calendar modern-events-calendar
Modern Events Calendar Lite modern-events-calendar-lite
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution dc-woocommerce-multi-vendor
My Custom CSS PHP & ADS my-custom-css
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification mycred
No Update Nag no-update-nag
Obfuscate Email obfuscate-email
Opal Membership opal-membership
Opti Marketing opti-marketing
Organization chart organization-chart
Page Builder Gutenberg Blocks – CoBlocks coblocks
Paid Memberships Pro - Membership Maps Add On pmpro-membership-maps
ParcelPanel (Free to install) – Shipment Tracking, Tracking, and Order Tracking for WooCommerce parcelpanel
Participants Database participants-database
PDF Builder for WPForms pdf-builder-for-wpforms
Post Grid and Gutenberg Blocks post-grid
Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder ajax-filter-posts
Premium Addons for Elementor premium-addons-for-elementor
Products, Order & Customers Export for WooCommerce export-woocommerce
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker quiz-master-next
Registrations for the Events Calendar – Event Registration Plugin registrations-for-the-events-calendar
Reveal Template reveal-template
Robin image optimizer — save money on image compression robin-image-optimizer
Search Analytics for WP search-analytics
Selection Lite selection-lite
Send Emails with Mandrill send-emails-with-mandrill
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce sender-net-automated-emails
Shared Files – Frontend File Upload Form & Secure File Sharing shared-files
Shield Security – Smart Bot Blocking & Intrusion Prevention Security wp-simple-firewall
Simple Local Avatars simple-local-avatars
Simple Share dts-simple-share
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel depicter
Slider by 10Web – Responsive Image Slider slider-wd
Slider by Soliloquy – Responsive Image Slider for WordPress soliloquy-lite
Social Slider Feed instagram-slider-widget
Spectra – WordPress Gutenberg Blocks ultimate-addons-for-gutenberg
StreamCast – Radio Player for WordPress streamcast
Sunshine Photo Cart: Free Client Photo Galleries for Photographers sunshine-photo-cart
Themify Shortcodes themify-shortcodes
Timeline and History slider timeline-and-history-slider
TrueBooker – Appointment Booking and Scheduler Plugin. truebooker-appointment-booking
Tutor LMS – eLearning and online course solution tutor
TypeSquare Webfonts for エックスサーバー xserver-typesquare-webfonts
Ultimate Addons for Beaver Builder – Lite ultimate-addons-for-beaver-builder-lite
Ultimate Bootstrap Elements for Elementor ultimate-bootstrap-elements-for-elementor
Unite Gallery Lite unite-gallery-lite
Viral Signup – limited opt-in with viral refferal sharing viral-signup
Visual Website Collaboration, Feedback & Project Management – Atarim atarim-visual-collaboration
Waitlist Woocommerce ( Back in stock notifier ) waitlist-woocommerce
WappPress – Create Mobile App for any WordPress site with our Mobile App Builder in just 1 minute wapppress-builds-android-app-for-website
Web Directory Free web-directory-free
WooCommerce - Social Login woo-social-login
WooCommerce Product Table Lite wc-product-table-lite
WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly tour-booking-manager
WP Dashboard Notes wp-dashboard-notes
WP MultiTasking – WP Utilities wp-multitasking
WP Table Builder – WordPress Table Plugin wp-table-builder
WPBakery Visual Composer js_composer
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce wp-cafe
WPSection wpsection
YaMaps for WordPress Plugin yamaps
ووکامرس فارسی persian-woocommerce


WordPress Themes with Reported Vulnerabilities Last Week

Software Name Software Slug
MDx MDx
MultiPurpose multipurpose
News Flash news-flash
Orchid Store orchid-store
The Next the-next
Woffice CRM woffice


Vulnerability Details

Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.

CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-43144
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-43132
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-6928
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
Opti Marketing
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-6924
Patch Status
Patched
Published
Aug 10, 2024
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-6926
Patch Status
Unpatched
Published
Aug 7, 2024
CVSS Rating
Critical (9.9)
CVE-ID
CVE-2024-43145
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Critical (9.9)
CVE-ID
CVE-2024-43207
Patch Status
Unpatched
Published
Aug 9, 2024
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-43160
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-3673
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Web Directory Free
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-43153
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Woffice CRM
Researcher
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-7503
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
WooCommerce - Social Login
Researcher
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-6315
Patch Status
Unpatched
Published
Aug 5, 2024
Affected Software
Blox Page Builder
Researcher
CVSS Rating
High (8.8)
CVE-ID
CVE-2023-5000
Patch Status
Patched
Published
Aug 5, 2024
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43221
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7548
Patch Status
Patched
Published
Aug 7, 2024
Researcher
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7492
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
MainWP Child Reports
Researcher
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7486
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
MultiPurpose
Researcher
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7561
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
The Next
Researcher
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43232
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43140
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-5709
Patch Status
Patched
Published
Aug 5, 2024
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43165
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
WPSection
CVSS Rating
High (8.5)
CVE-ID
CVE-2024-6522
Patch Status
Patched
Published
Aug 6, 2024
CVSS Rating
High (8.1)
CVE-ID
CVE-2024-43141
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Participants Database
Researcher
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-7484
Patch Status
Patched
Published
Aug 5, 2024
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-43236
Patch Status
Patched
Published
Aug 9, 2024
Researcher
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-43121
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-7560
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
News Flash
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43123
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Card Elements for Elementor
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43149
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
CM Tooltip Glossary
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43155
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43225
Patch Status
Unpatched
Published
Aug 9, 2024
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43139
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Football Pool
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5226
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Fuse Social Floating Sidebar
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43124
Patch Status
Patched
Published
Aug 7, 2024
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43210
Patch Status
Patched
Published
Aug 9, 2024
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6639
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
MDx
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43218
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Mediavine Control Panel
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43147
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Selection Lite
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43133
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Themify Shortcodes
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43151
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43226
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
WP Dashboard Notes
Researcher
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43125
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5708
Patch Status
Patched
Published
Aug 5, 2024
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43150
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43224
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
YaMaps for WordPress Plugin
Researcher
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43233
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
BSK Forms Blacklist
Researcher
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-7574
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Christmasify!
Researcher
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43220
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43217
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Kodex Posts likes
Researcher
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-7649
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Opal Membership
Researcher
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43163
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43127
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43213
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-6859
Patch Status
Unpatched
Published
Aug 10, 2024
Researcher
CVSS Rating
Medium (5.5)
CVE-ID
CVE-2024-43231
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-7353
Patch Status
Patched
Published
Aug 6, 2024
Affected Software
Accept Stripe Payments
Researcher
CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-6869
Patch Status
Patched
Published
Aug 7, 2024
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6562
Patch Status
Patched
Published
Aug 8, 2024
Affected Software
affiliate-toolkit
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43209
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Bitly's WordPress Plugin
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6552
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43223
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-38787
Patch Status
Patched
Published
Aug 7, 2024
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7382
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
Linkify Text
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43158
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43159
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7410
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
My Custom CSS PHP & ADS
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7412
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
No Update Nag
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7413
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
Obfuscate Email
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7414
Patch Status
Patched
Published
Aug 8, 2024
Affected Software
PDF Builder for WPForms
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43219
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
ووکامرس فارسی
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7416
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
Reveal Template
Researcher
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43230
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43142
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43120
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43212
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (4.9)
CVE-ID
CVE-2024-7355
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Organization chart
Researcher
CVSS Rating
Medium (4.8)
CVE-ID
CVE-2024-43128
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
WooCommerce Product Table Lite
Researcher
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6722
Patch Status
Unpatched
Published
Aug 6, 2024
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6797
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
DL Robots.txt
Researcher
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6798
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
DL Verification
Researcher
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6462
Patch Status
Unpatched
Published
Aug 6, 2024
Affected Software
DL Yandex Metrika
Researcher
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43216
Patch Status
Patched
Published
Aug 9, 2024
Researcher
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43130
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Football Pool
Researcher
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43211
Patch Status
Unpatched
Published
Aug 9, 2024
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-7132
Patch Status
Patched
Published
Aug 8, 2024
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43148
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6927
Patch Status
Unpatched
Published
Aug 7, 2024
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-7556
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
Simple Share
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43154
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43146
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43119
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Aruba HiSpeed Cache
Researcher(s): Unknown
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6254
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Brizy – Page Builder
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43162
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43157
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
FormCraft – Form Builder
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43235
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-7648
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Opal Membership
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6987
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Orchid Store
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-1286
Patch Status
Patched
Published
Aug 9, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43143
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43122
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43208
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Send Emails with Mandrill
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43116
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Simple Local Avatars
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43215
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Social Slider Feed
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43136
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6925
Patch Status
Patched
Published
Aug 10, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43134
Patch Status
Patched
Published
Aug 7, 2024
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6855
Patch Status
Unpatched
Published
Aug 10, 2024
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6852
Patch Status
Unpatched
Published
Aug 10, 2024
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6856
Patch Status
Unpatched
Published
Aug 10, 2024
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6853
Patch Status
Unpatched
Published
Aug 10, 2024
Researcher
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43229
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Search Analytics for WP
Researcher


As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.

This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.

Did you enjoy this post? Share it!

Comments

No Comments