Skip to content
OpenAdvisories

Archive

January 2021

Vulnerabilities first published in this month (UTC), newest first.

1,527 results · Feed

  • High 7.5

    Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote…

  • High 7.5

    Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote auth…

  • High 7.5

    The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aa…

  • Medium 4.3

    The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metada…

  • Medium 6.5

    A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress …

  • High 7.5

    Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with…

  • Critical 9.6
    CVE-2020-35391 Public exploit EPSS 35%

    Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pa…