Skip to content
OpenAdvisories

Archive

7 June 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-20887 Exploited Public exploit Scanner template EPSS 98%

    Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMwar…

    KEV Jun 22, 2023
  • Critical 9.1
    CVE-2021-4374 Public exploit Scanner template EPSS 16%

    WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

    The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the process_form.php file. This makes it possible for unauthenticat…

  • Critical 9.8
    CVE-2020-36708 Public exploit Scanner template EPSS 65%

    Epsilon Framework Themes (Various Versions) - Function Injection

    The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.…