diff --git a/advisories/unreviewed/2024/04/GHSA-xjx3-c2f9-8m6p/GHSA-xjx3-c2f9-8m6p.json b/advisories/unreviewed/2024/04/GHSA-xjx3-c2f9-8m6p/GHSA-xjx3-c2f9-8m6p.json
index acd61df1de6..1afd44558ed 100644
--- a/advisories/unreviewed/2024/04/GHSA-xjx3-c2f9-8m6p/GHSA-xjx3-c2f9-8m6p.json
+++ b/advisories/unreviewed/2024/04/GHSA-xjx3-c2f9-8m6p/GHSA-xjx3-c2f9-8m6p.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xjx3-c2f9-8m6p",
-  "modified": "2024-04-05T15:30:30Z",
+  "modified": "2024-06-05T12:31:51Z",
   "published": "2024-04-03T12:31:06Z",
   "aliases": [
     "CVE-2024-31380"
@@ -29,6 +29,10 @@
       "type": "WEB",
       "url": "https://patchstack.com/database/vulnerability/oxygen/wordpress-oxygen-plugin-4-8-1-auth-remote-code-execution-rce-vulnerability?_s_id=cve"
     },
+    {
+      "type": "WEB",
+      "url": "https://snicco.io/vulnerability-disclosure/oxygen/client-control-remote-code-execution-oxygen-4-8-1"
+    },
     {
       "type": "WEB",
       "url": "https://snicco.io/vulnerability-disclosure/oxygen/client-control-remote-code-execution-oxygen-4-8-1?_s_id=cve"
diff --git a/advisories/unreviewed/2024/06/GHSA-5cwx-g8mg-7v9c/GHSA-5cwx-g8mg-7v9c.json b/advisories/unreviewed/2024/06/GHSA-5cwx-g8mg-7v9c/GHSA-5cwx-g8mg-7v9c.json
new file mode 100644
index 00000000000..5965d08f78b
--- /dev/null
+++ b/advisories/unreviewed/2024/06/GHSA-5cwx-g8mg-7v9c/GHSA-5cwx-g8mg-7v9c.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5cwx-g8mg-7v9c",
+  "modified": "2024-06-05T12:31:51Z",
+  "published": "2024-06-05T12:31:51Z",
+  "aliases": [
+    "CVE-2024-5526"
+  ],
+  "details": "Grafana OnCall is an easy-to-use on-call management tool that will help reduce toil in on-call management through simpler workflows and interfaces that are tailored specifically for engineers.\n\nGrafana OnCall, from version 1.1.37 before 1.5.2 are vulnerable to a Server Side Request Forgery (SSRF) vulnerability in the webhook functionallity. \n\nThis issue was fixed in version 1.5.2",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5526"
+    },
+    {
+      "type": "WEB",
+      "url": "https://grafana.com/security/security-advisories/cve-2024-5526"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-918"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-05T12:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/06/GHSA-5h8m-gw93-f3w6/GHSA-5h8m-gw93-f3w6.json b/advisories/unreviewed/2024/06/GHSA-5h8m-gw93-f3w6/GHSA-5h8m-gw93-f3w6.json
new file mode 100644
index 00000000000..2d8ef2f82aa
--- /dev/null
+++ b/advisories/unreviewed/2024/06/GHSA-5h8m-gw93-f3w6/GHSA-5h8m-gw93-f3w6.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5h8m-gw93-f3w6",
+  "modified": "2024-06-05T12:31:51Z",
+  "published": "2024-06-05T12:31:51Z",
+  "aliases": [
+    "CVE-2024-1662"
+  ],
+  "details": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application allows Retrieve Embedded Sensitive Data.This issue affects PowerBank Application: before 2.02.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1662"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.usom.gov.tr/bildirim/tr-24-0602"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-05T12:15:10Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/06/GHSA-p7gw-hh3x-x6xm/GHSA-p7gw-hh3x-x6xm.json b/advisories/unreviewed/2024/06/GHSA-p7gw-hh3x-x6xm/GHSA-p7gw-hh3x-x6xm.json
new file mode 100644
index 00000000000..557ca7ddcf2
--- /dev/null
+++ b/advisories/unreviewed/2024/06/GHSA-p7gw-hh3x-x6xm/GHSA-p7gw-hh3x-x6xm.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p7gw-hh3x-x6xm",
+  "modified": "2024-06-05T12:31:51Z",
+  "published": "2024-06-05T12:31:51Z",
+  "aliases": [
+    "CVE-2024-4001"
+  ],
+  "details": "The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_modal_login_form' shortcode in all versions up to, and including, 3.2.93 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4001"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3096459"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b478d88d-1423-4a33-b8ef-08b9e66a5d98?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-05T11:15:08Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/06/GHSA-rcpr-pf4m-pw93/GHSA-rcpr-pf4m-pw93.json b/advisories/unreviewed/2024/06/GHSA-rcpr-pf4m-pw93/GHSA-rcpr-pf4m-pw93.json
new file mode 100644
index 00000000000..c9424a0ad1c
--- /dev/null
+++ b/advisories/unreviewed/2024/06/GHSA-rcpr-pf4m-pw93/GHSA-rcpr-pf4m-pw93.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rcpr-pf4m-pw93",
+  "modified": "2024-06-05T12:31:51Z",
+  "published": "2024-06-05T12:31:51Z",
+  "aliases": [
+    "CVE-2024-5536"
+  ],
+  "details": "The GamiPress – Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's gamipress_link shortcode in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5536"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3096646%40gamipress-link%2Ftrunk&old=2989725%40gamipress-link%2Ftrunk&sfp_email=&sfph_mail="
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6c3954af-f7db-495c-b6f0-49f24d6f4b18?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-06-05T10:15:09Z"
+  }
+}
\ No newline at end of file