Skip to content
OpenAdvisories

Archive

18 March 2019

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2018-20556 Public exploit EPSS 19%

    SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2018-20555 Public exploit EPSS 10%

    The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_t…

  • Unscored —
    CVE-2018-20526 Public exploit Scanner template EPSS 73%

    Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

  • Unscored —
    CVE-2018-20525 Public exploit EPSS 22%

    Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.