Archive
4 July 2023
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Unscored —
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild.
-
Unscored —CVE-2023-20768 Public exploit
In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege …