Skip to content
OpenAdvisories

Archive

15 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /15 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-29439

    WordPress Image Slider by NextCode plugin <= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting slides.

    NextCode Image Slider by NextCode – Photo & Video SLider (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-29453

    WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

    Cross-Site Request Forgery (CSRF) vulnerability in API KEY for Google Maps plugin <= 1.2.1 at WordPress leading to Google Maps API key update.

    AyeCode API KEY for Google Maps
  • Medium 4.8
    CVE-2022-29438

    WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress.

    NextCode Image Slider by NextCode – Photo & Video SLider (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-29437

    WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress.

    NextCode Image Slider by NextCode – Photo & Video SLider (WordPress plugin) Web / CMS
  • Medium 4.1
    CVE-2022-29406

    WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in DynamicWebLab's WordPress Team Manager plugin <= 1.6.9 at WordPress.

    Dynamic Web Lab WordPress Team Manager (WordPress plugin) Web / CMS
  • Medium 4.1
    CVE-2022-27859

    WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark d.o.o. Travel Management plugin <= 2.0 at WordPress.

    Nicdark d.o.o. Travel Management (WordPress plugin) Web / CMS
  • Medium 6.3
    CVE-2022-2086 EPSS 20%

    SourceCodester Bank Management System login.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep(10),3,4,5 --+ leads to…

    SourceCodester Bank Management System
  • Medium 6.1
    CVE-2021-36901

    WordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

    Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Phil Baker's Age Gate plugin <= 2.17.0 at WordPress.

    Phil Baker Age Gate (WordPress plugin) Web / CMS
  • Medium 6.3
    CVE-2022-1958

    FileCloud NTFS access control

    A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18…