Skip to content
OpenAdvisories

Archive

7 June 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.3
    CVE-2020-36730 Public exploit

    CMP <= 3.8.1 - Missing Authorization

    The CMP for WordPress is vulnerable to authorization bypass due to a missing capability check on the cmp_get_post_detail(), niteo_export_csv(), and cmp_disable_comingsoon_ajax() functions in versions up to, and including, 3.8.1. This makes it possible for una…

  • High 8.8
    CVE-2023-3124 Public exploit EPSS 23%

    Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

    The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subsc…

  • High 8.8
    CVE-2023-33781 Public exploit EPSS 31%

    An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.

  • High 8.8
    CVE-2023-33782 Public exploit EPSS 36%

    D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.

  • High 8.8
    CVE-2023-33538 Exploited Public exploit EPSS 42%

    TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerabil…

    KEV Jun 16, 2025