Skip to content
OpenAdvisories

Archive

17 May 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-22120 Public exploit EPSS 77%

    Time Based SQL Injection in Zabbix Server Audit Log

    Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL inje…

  • Critical 9.3
    CVE-2024-27954 Public exploit Scanner template EPSS 73%

    WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary File Download and SSRF vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.92.0.

  • Critical 9.9
    CVE-2024-33644 Public exploit

    WordPress Customify Site Library plugin <= 0.0.9 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify Site Library allows Code Injection.This issue affects Customify Site Library: from n/a through 0.0.9.

  • Critical 10.0
    CVE-2024-31351 Public exploit

    WordPress Copymatic plugin <= 1.6 - Unauthenticated Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6.