Skip to content
OpenAdvisories

Archive

1 January 2021

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • High 8.8

    An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vul…

  • High 7.4

    An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lac…

  • High 7.5

    PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticate…

  • High 7.5

    PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated att…

  • High 7.5

    Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote…

  • High 7.5

    Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote auth…

  • High 7.5

    The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aa…

  • High 7.5

    Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with…