Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-16 CVE-2024-5210 A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to prevent printer services from being reachable until the system is rebooted.
low complexity
 6.5
6.5
2024-08-16 CVE-2024-6004 A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to deny printer connections until the system is rebooted.
low complexity
 6.5
6.5
2024-08-16 CVE-2024-42463 Authorization Bypass Through User-Controlled Key vulnerability in Upkeeper Manager
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9.
network
low complexity
upkeeper CWE-639
6.5
6.5
2024-08-16 CVE-2024-42464 Authorization Bypass Through User-Controlled Key vulnerability in Upkeeper Manager
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9.
network
low complexity
upkeeper CWE-639
6.5
6.5
2024-08-16 CVE-2024-7144 Cross-site Scripting vulnerability in Crocoblock Jetelements
The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slide_id' parameters in all versions up to, and including, 2.6.20 due to insufficient input sanitization and output escaping.
network
low complexity
crocoblock CWE-79
5.4
5.4
2024-08-16 CVE-2024-7147 The JetBlocks for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple placeholder parameters in all versions up to, and including, 1.3.12 due to insufficient input sanitization and output escaping.
network
low complexity
 6.4
6.4
2024-08-16 CVE-2024-7501 The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.7.
network
high complexity
 4.2
4.2
2024-08-16 CVE-2024-7422 The Theme My Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.1.7.
network
low complexity
 4.3
4.3
2024-08-16 CVE-2022-3399 The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cookie_notice_options[refuse_code_head]' parameter in versions up to, and including, 2.4.17.1 due to insufficient input sanitization and output escaping.
network
high complexity
 4.4
4.4
2024-08-16 CVE-2023-7049 The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the the 'cm_fieldshow' shortcode due to missing validation on the 'job_id' user controlled key.
network
low complexity
 4.3
4.3