| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-4886 | BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR | Unknown | buddyboss-platform | - | - | 2024-06-05 06:00:03 | Deep Dive |
| CVE-2024-0756 | Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe Injection | Unknown | Insert or Embed Articulate Content into WordPress | - | - | 2024-06-04 14:28:08 | Deep Dive |
| CVE-2024-4857 | FS Product Inquiry <= 1.1.1 - Unauthenticated Stored XSS | Unknown | FS Product Inquiry | - | - | 2024-06-04 06:00:03 | Deep Dive |
| CVE-2024-4856 | FS Product Inquiry <= 1.1.1 - Reflected XSS | Unknown | FS Product Inquiry | - | - | 2024-06-04 06:00:03 | Deep Dive |
| CVE-2024-4750 | BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment | Unknown | buddyboss-platform | - | - | 2024-06-04 06:00:03 | Deep Dive |
| CVE-2024-4749 | WP eMember < 10.3.9 - Reflected XSS | Unknown | wp-eMember | - | - | 2024-06-04 06:00:03 | Deep Dive |
| CVE-2024-4180 | The Events Calendar < 6.4.0.1 - Reflected XSS | Unknown | The Events Calendar | - | - | 2024-06-04 06:00:03 | Deep Dive |
| CVE-2024-4057 | Gutenberg Blocks by Kadence Blocks < 3.2.37 - Contributor+ Stored XSS | Unknown | Gutenberg Blocks with AI by Kadence WP | - | - | 2024-06-04 06:00:02 | Deep Dive |
| CVE-2024-2470 | Simple Ajax Chat < 20240412 - Admin+ Stored XSS | Unknown | Simple Ajax Chat | - | - | 2024-06-04 06:00:02 | Deep Dive |
| CVE-2024-0757 | Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE | Unknown | Insert or Embed Articulate Content into WordPress | - | - | 2024-06-04 06:00:02 | Deep Dive |
| CVE-2024-4469 | Migration Backup Restore < 3.5.0 - Admin+ SSRF | Unknown | WP STAGING WordPress Backup Plugin | 中危 | - | 2024-05-31 06:00:02 | Deep Dive |
| CVE-2024-5341 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget | posimyththemes | The Plus Addons for Elementor Page Builder Pro | Medium | 6.4 | 2024-05-30 05:33:16 | Deep Dive |
| CVE-2024-3050 | Site Reviews < 7.0.0 - IP Spoofing | Unknown | Site Reviews | - | - | 2024-05-29 06:00:02 | Deep Dive |
| CVE-2024-3937 | Playlist for Youtube <= 1.32 - Editor+ Stored XSS | Unknown | Playlist for Youtube | - | - | 2024-05-29 06:00:02 | Deep Dive |
| CVE-2024-3921 | Gianism <= 5.1.0 - Admin+ Stored XSS | Unknown | Gianism | - | - | 2024-05-29 06:00:02 | Deep Dive |
| CVE-2024-4533 | KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection | Unknown | KKProgressbar2 Free | - | - | 2024-05-27 06:00:03 | Deep Dive |
| CVE-2024-4534 | KKProgressbar2 Free <= 1.1.4.2 - Stored XSS via CSRF | Unknown | KKProgressbar2 Free | - | - | 2024-05-27 06:00:03 | Deep Dive |
| CVE-2024-4535 | KKProgressbar2 Free <= 1.1.4.2 - Progress Bar Deletion via CSRF | Unknown | KKProgressbar2 Free | - | - | 2024-05-27 06:00:03 | Deep Dive |
| CVE-2024-4530 | Business Card <= 1.0.0 - Category Edit via CSRF | Unknown | Business Card | - | - | 2024-05-27 06:00:02 | Deep Dive |
| CVE-2024-4531 | Business Card <= 1.0.0 - Card Edit via CSRF | Unknown | Business Card | - | - | 2024-05-27 06:00:02 | Deep Dive |