Skip to content
OpenAdvisories

Archive

12 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /12 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-6036 Public exploit

    Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass

    The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'. This makes it possible for non authenticated attackers to…

    Web / CMS
  • High 7.2
    CVE-2024-0566 Public exploit

    Smart Manager < 8.28.0 - Admin+ SQL Injection

    The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

    Web / CMS
  • Medium 5.4
    CVE-2023-46615 Public exploit

    WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7.

    Kalli Dan. KD Coming Soon
  • High 7.5
    CVE-2024-24926 Public exploit

    WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6.

    United Themes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2024-23759 Public exploit EPSS 48%

    Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" paramet…