Skip to content
OpenAdvisories

Archive

17 May 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.6
    CVE-2024-32830 Public exploit

    WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeKraft BuddyForms allows Server Side Request Forgery, Relative Path Traversal.This issue affects BuddyForms: from n/a through 2.8.8.

  • High 8.8
    CVE-2024-32507 Public exploit

    WordPress Login with phone number plugin <= 1.7.16 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.7.16.

  • High 8.8
    CVE-2024-22145 Public exploit

    WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.8.

  • High 7.2
    CVE-2024-34370 Public exploit

    WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9.