Skip to content
OpenAdvisories

Archive

7 June 2023

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-20887 Exploited Public exploit Scanner template EPSS 98%

    Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMwar…

    KEV Jun 22, 2023
  • High 8.3
    CVE-2020-36730 Public exploit

    CMP <= 3.8.1 - Missing Authorization

    The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for una…

  • Critical 9.1
    CVE-2021-4374 Public exploit Scanner template EPSS 16%

    WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

    The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the process_form.php file. This makes it possible for unauthenticat…

  • Critical 9.8
    CVE-2020-36708 Public exploit Scanner template EPSS 65%

    Epsilon Framework Themes (Various Versions) - Function Injection

    The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.…

  • High 8.8
    CVE-2023-3124 Public exploit EPSS 23%

    Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

    The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subsc…

  • High 8.8
    CVE-2023-33781 Public exploit EPSS 31%

    An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.

  • High 8.8
    CVE-2023-33782 Public exploit EPSS 36%

    D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.

  • High 8.8
    CVE-2023-33538 Exploited Public exploit EPSS 42%

    TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerabil…

    KEV Jun 16, 2025