Skip to content
OpenAdvisories

Archive

5 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /5 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Unscored —
    CVE-2021-24174 Public exploit

    Database Backups <= 1.2.2.6 - CSRF to Backup Download

    The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.

    Web / CMS
  • Unscored —
    CVE-2021-24169 Public exploit Scanner template EPSS 10%

    Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

    This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.

    Web / CMS
  • Unscored —
    CVE-2021-24160 Public exploit

    Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload

    In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to…

    ExpressTech Systems Responsive Menu Pro Responsive Menu – Create Mobile-Friendly Menu
  • Unscored —
    CVE-2021-24155 Public exploit Scanner template EPSS 84%

    Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

    The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to …

    Web / CMS
  • Medium 6.1
    CVE-2021-30109 Public exploit

    Cross-site Scripting in Froala Editor

    Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module.

    froala-editor npm
  • Unscored —
    CVE-2020-17453 Public exploit Scanner template EPSS 26%

    WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.