Skip to content
OpenAdvisories

Archive

28 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /28 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-5864

    Easy Affiliate Links <= 3.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

    The Easy Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eafl_reset_settings AJAX action in all versions up to, and including, 3.7.3. This makes it possible for authenticated att…

    brechtvds Easy Affiliate Links Web / CMS
  • Medium 5.4
    CVE-2024-5863

    Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance

    The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajax_image_collage() function in all versions up to, and including, 1.13.5. This makes it possible for authenticated attackers, wit…

    brechtvds Easy Image Collage Web / CMS
  • Medium 6.1
    CVE-2024-39828

    R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file. This was fixed in a hotfix to…

  • Medium 5.4
    CVE-2024-37741

    OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.