diff --git a/advisories/unreviewed/2024/05/GHSA-457w-p2rx-36qq/GHSA-457w-p2rx-36qq.json b/advisories/unreviewed/2024/05/GHSA-457w-p2rx-36qq/GHSA-457w-p2rx-36qq.json
new file mode 100644
index 00000000000..6dc74e7e76c
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-457w-p2rx-36qq/GHSA-457w-p2rx-36qq.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-457w-p2rx-36qq",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-4346"
+  ],
+  "details": "The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4346"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/startklar-elmentor-forms-extwidgets/trunk/startklarDropZoneUploadProcess.php?rev=3061298#L7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3081987/startklar-elmentor-forms-extwidgets"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a125bbf1-8ff6-4f3d-a4fb-caaaefe1df2a?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T09:15:39Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-cf65-84fr-hwv4/GHSA-cf65-84fr-hwv4.json b/advisories/unreviewed/2024/05/GHSA-cf65-84fr-hwv4/GHSA-cf65-84fr-hwv4.json
new file mode 100644
index 00000000000..ad1f291d3bc
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-cf65-84fr-hwv4/GHSA-cf65-84fr-hwv4.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cf65-84fr-hwv4",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-23808"
+  ],
+  "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23808"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-125"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T07:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-m3qq-5j3g-rq9q/GHSA-m3qq-5j3g-rq9q.json b/advisories/unreviewed/2024/05/GHSA-m3qq-5j3g-rq9q/GHSA-m3qq-5j3g-rq9q.json
new file mode 100644
index 00000000000..9279b195864
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-m3qq-5j3g-rq9q/GHSA-m3qq-5j3g-rq9q.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m3qq-5j3g-rq9q",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-3759"
+  ],
+  "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3759"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T07:15:50Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-mqgc-wwff-qc9q/GHSA-mqgc-wwff-qc9q.json b/advisories/unreviewed/2024/05/GHSA-mqgc-wwff-qc9q/GHSA-mqgc-wwff-qc9q.json
new file mode 100644
index 00000000000..f4bc1879e2a
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-mqgc-wwff-qc9q/GHSA-mqgc-wwff-qc9q.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mqgc-wwff-qc9q",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-31078"
+  ],
+  "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31078"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T07:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-mqmq-vr52-c53r/GHSA-mqmq-vr52-c53r.json b/advisories/unreviewed/2024/05/GHSA-mqmq-vr52-c53r/GHSA-mqmq-vr52-c53r.json
new file mode 100644
index 00000000000..f250f216f4f
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-mqmq-vr52-c53r/GHSA-mqmq-vr52-c53r.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mqmq-vr52-c53r",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-3758"
+  ],
+  "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3758"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-122"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T07:15:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-p7p2-vf3x-m7fp/GHSA-p7p2-vf3x-m7fp.json b/advisories/unreviewed/2024/05/GHSA-p7p2-vf3x-m7fp/GHSA-p7p2-vf3x-m7fp.json
new file mode 100644
index 00000000000..3b1274d9839
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-p7p2-vf3x-m7fp/GHSA-p7p2-vf3x-m7fp.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p7p2-vf3x-m7fp",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-3757"
+  ],
+  "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3757"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-190"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T07:15:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-pq5j-cmm3-64mg/GHSA-pq5j-cmm3-64mg.json b/advisories/unreviewed/2024/05/GHSA-pq5j-cmm3-64mg/GHSA-pq5j-cmm3-64mg.json
new file mode 100644
index 00000000000..1e69d873a92
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-pq5j-cmm3-64mg/GHSA-pq5j-cmm3-64mg.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pq5j-cmm3-64mg",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-27217"
+  ],
+  "details": "in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27217"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-05.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T07:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/05/GHSA-w6gp-8v4q-c8g7/GHSA-w6gp-8v4q-c8g7.json b/advisories/unreviewed/2024/05/GHSA-w6gp-8v4q-c8g7/GHSA-w6gp-8v4q-c8g7.json
new file mode 100644
index 00000000000..1276f875e46
--- /dev/null
+++ b/advisories/unreviewed/2024/05/GHSA-w6gp-8v4q-c8g7/GHSA-w6gp-8v4q-c8g7.json
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w6gp-8v4q-c8g7",
+  "modified": "2024-05-07T09:30:32Z",
+  "published": "2024-05-07T09:30:32Z",
+  "aliases": [
+    "CVE-2024-4345"
+  ],
+  "details": "The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process' function in the 'startklarDropZoneUploadProcess' class in versions up to, and including, 1.7.13. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4345"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/startklar-elmentor-forms-extwidgets/trunk/startklarDropZoneUploadProcess.php?rev=3061298#L7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3081987/startklar-elmentor-forms-extwidgets"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4221b33c-5cfa-48db-92bf-bf25ff3c5a5f?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-05-07T09:15:38Z"
+  }
+}
\ No newline at end of file