Latest Vulnerabilities Updates: AppSecWorld's CVE Daily Digest for July 06-07, 2024

In the dynamic realm of cybersecurity, staying updated on the latest vulnerabilities is imperative.
This edition of the AppSecWorld's CVE Daily Digest provides a snapshot of the vulnerabilities published in National Vulnerability Database between July 06-07, 2024.
During this period, The National Vulnerability Database published 14, and these new Common Vulnerabilities and Exposures (CVEs) are classified as follows:

Critical: 0
High: 1
Medium: 10
Low: 2
Severity Not Assigned: 1

Identifying and understanding these vulnerabilities are pivotal steps towards enhancing security measures and creating a safer digital environment.
Now, let's delve deeper into AppSecWorld's CVE Daily Digest, spotlighting the Critical and High Severity vulnerabilities that demand immediate attention.

1. CVE-2024-37260
Base Score: 7.2
Base Severity: HIGH
Exploitability Score: 3.9
Impact Score: 2.7
Description: Server-Side Request Forgery (SSRF) vulnerability in Theme-Ruby Foxiz.This issue affects Foxiz: from n/a through 2.3.5.
References: https://patchstack.com/database/vulnerability/foxiz/wordpress-foxiz-theme-theme-2-3-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

CWE-ID: CWE-918
Common Platform Enumerations (CPE): Not Found