Skip to content
OpenAdvisories

Archive

9 May 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-3806 Public exploit

    Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

    The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, all…