Skip to content
OpenAdvisories

Archive

18 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /18 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Unscored —
    CVE-2021-24145 Public exploit EPSS 88%

    Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

    Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request.

    Web / CMS
  • Unscored —
    CVE-2021-24146 Public exploit EPSS 31%

    Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export

    Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.

    Web / CMS
  • Unscored —
    CVE-2021-28420 Public exploit

    A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and t…

  • Unscored —
    CVE-2021-28419 Public exploit EPSS 11%

    The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which lead…

  • Unscored —
    CVE-2021-28418 Public exploit

    A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and…

  • Unscored —
    CVE-2021-28417 Public exploit

    A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and …