Skip to content
OpenAdvisories

Archive

22 February 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-3120 EPSS 37%

    An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress all…

  • Critical 9.8
    CVE-2021-26120 EPSS 82%

    PHP Code Injection by malicious function name in smarty

    Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.