Skip to content
OpenAdvisories

Archive

2 May 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-0710 Public exploit

    GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification

    The GP Unique ID plugin for WordPress is vulnerable to Unique ID Modification in all versions up to, and including, 1.5.5. This is due to insufficient input validation. This makes it possible for unauthenticated attackers to tamper with the generation of a un…

  • Medium 6.5
    CVE-2024-3553 Public exploit

    Tutor LMS <= 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update

    The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the hide_notices function in all versions up to, and including, 2.6.2. This makes it possible for…