Skip to content
OpenAdvisories

Archive

10 August 2024

Vulnerabilities first published on this day (UTC), newest first.

← July 2024 2024 / August /10 September 2024 →
  1. 1129
  2. 266
  3. 321
  4. 413
  5. 5103
  6. 6160
  7. 7118
  8. 8112
  9. 966
  10. 1016
  11. 1122
  12. 12119
  13. 13226
  14. 14206
  15. 15122
  16. 1656
  17. 17135
  18. 1866
  19. 1972
  20. 20147
  21. 21177
  22. 22129
  23. 2378
  24. 2428
  25. 2524
  26. 26142
  27. 2767
  28. 2875
  29. 29135
  30. 3070
  31. 3118
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-6134

    WP eStore < 8.5.6 - Reflected XSS in Product Editing

    The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

    Web / CMS
  • Medium 6.1
    CVE-2024-7574

    Christmasify! <= 1.5.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Christmasify! plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.5. This is due to missing nonce validation on the 'options' function. This makes it possible for unauthenticated attackers to modify the p…

    cyberfoxdigital Christmasify! Web / CMS
  • Medium 5.3
    CVE-2024-5801

    IP Forwarding enabled in B&R Automation Runtime

    Enabled IP Forwarding feature in B&R Automation Runtime versions before 6.0.2 may allow remote attack-ers to compromise network security by routing IP-based packets through the host, potentially by-passing firewall, router, or NAC filtering.

    B&R Industrial Automation Automation Runtime
  • Medium 6.1
    CVE-2024-7649

    Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting

    The Opal Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via checkout form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated a…

    wpopal Opal Membership Web / CMS
  • Medium 4.3
    CVE-2024-7648

    Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure

    The Opal Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.4 via the private notes functionality on payments which utilizes WordPress comments. This makes it possible for authenticated at…

    wpopal Opal Membership Web / CMS
  • Medium 5.4
    CVE-2024-7621

    Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update

    The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the process_wpfeedback_misc_options() function in all versions up to, and inc…

    wpfeedback Atarim – Visual Feedback, Review & AI Collaboration Web / CMS
  • Medium 4.4
    CVE-2024-6691

    Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Currency Settings

    The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the currency value in all versions up to, and including, 3.3.2 due to insufficient inp…

    smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy Web / CMS