Skip to content
OpenAdvisories

Archive

16 August 2023

Vulnerabilities first published on this day (UTC), newest first.

45 results · Clear filters · Feed

  • Medium 4.3

    Unverified Password Change in instantsoft/icms2

    Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

  • Medium 6.5

    WordPress Kaya QR Code Generator Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kaya Studio Kaya QR Code Generator plugin <= 1.5.2 versions.

  • Medium 5.9

    WordPress Captcha Them All Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Benjamin Guy Captcha Them All plugin <= 1.3.3 versions.

  • Medium 6.1

    @excalidraw/excalidraw Cross-site Scripting vulnerability

    Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting (XSS) via embedded links in whiteboard objects due to improper input sanitization.

  • Medium 4.3

    WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View

    The WP Remote Users Sync plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'refresh_logs_async' functions in versions up to, and including, 1.2.11. This makes it possible for authen…