Skip to content
OpenAdvisories

Archive

15 August 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-4357 Public exploit EPSS 47%

    Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to …

  • High 7.5
    CVE-2023-2916 Public exploit EPSS 24%

    InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract s…