Skip to content
OpenAdvisories

Archive

17 November 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-42362 Public exploit EPSS 80%

    WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload

    The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malic…