Archive
20 May 2023
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
High 7.1
WordPress WP Airbnb Review Slider Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in LJ Apps WP Airbnb Review Slider plugin <= 3.2 versions.
-
High 7.5
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may af…
-
High 7.5
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may a…
-
High 7.5
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may a…
-
High 7.5
The window management module lacks permission verification.Successful exploitation of this vulnerability may affect con…
-
High 7.5
Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation
The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing nonce validation in the 'ajax_edit_contact' function. This makes it possible for authenticated attackers to recei…
-
High 8.2
Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) …
-
High 8.8
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted …