Skip to content
OpenAdvisories

Archive

8 September 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6924 Scanner template

    TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi

    The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

  • Critical 9.8
    CVE-2024-6928 Scanner template

    Opti Marketing <= 2.0.9 - Unauthenticated SQLi

    The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.