Skip to content
OpenAdvisories

Archive

1 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /1 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2021-3002

    Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter.

  • Unscored —
    CVE-2020-35717 Public exploit

    zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in we…

  • High 8.8
    CVE-2020-35944

    An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vul…

  • Critical 9.9
    CVE-2020-35945

    An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authen…

  • Medium 5.4
    CVE-2020-35946

    An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fie…

  • High 7.4
    CVE-2020-35947

    An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lac…

  • Critical 9.9
    CVE-2020-35948 Public exploit EPSS 25%

    An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated att…

  • Critical 10.0
    CVE-2020-35949

    An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauth…

  • Critical 9.8
    CVE-2020-35950

    An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almo…

  • Critical 9.9
    CVE-2020-35951 EPSS 76%

    An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbi…

  • High 7.5
    CVE-2020-35939

    PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticate…

  • High 7.5
    CVE-2020-35938

    PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated att…

  • High 7.5
    CVE-2020-35937

    Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote…

  • High 7.5
    CVE-2020-35936

    Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote auth…

  • High 7.5
    CVE-2020-35935

    The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aa…

  • Medium 4.3
    CVE-2020-35934

    The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metada…

  • Medium 6.5
    CVE-2020-35933

    A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress …

  • High 7.5
    CVE-2020-35932

    Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with…

  • Critical 9.6
    CVE-2020-35391 Public exploit EPSS 35%

    Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pa…