Archive

11 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /11 February 2024 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2023-6875 Public exploit Scanner template EPSS 90%

POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API

The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all v…

Saad Iqbal Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App Web / CMS

Jan 11, 2024
Critical 9.8

CVE-2023-6567 Public exploit Scanner template EPSS 51%

LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by

The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis…

ThimPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses Web / CMS

Jan 11, 2024