Skip to content
OpenAdvisories

Archive

29 July 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-6366 Public exploit Scanner template EPSS 29%

    User Profile Builder < 3.11.8 - Unauthenticated Media Upload

    The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.