Skip to content
OpenAdvisories

Archive

19 December 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-4063 Public exploit Scanner template EPSS 10%

    InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE

    The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.