Skip to content
OpenAdvisories

Archive

17 May 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-2745 Public exploit Scanner template EPSS 80%

    WordPress Core < 6.2.1 - Directory Traversal

    WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafte…

  • Medium 4.8
    CVE-2023-31699 Public exploit

    ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.

  • Medium 5.4
    CVE-2023-31698 Public exploit

    Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's securi…