Skip to content
OpenAdvisories

Archive

5 April 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-4939 Public exploit

    WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation

    THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it p…

  • Critical 9.8
    CVE-2022-31890 Public exploit

    SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13de…