Skip to content
OpenAdvisories

Archive

25 September 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.7

    Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add

    The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for au…

  • Low 3.3

    BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web …