Archive
25 September 2024
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Low 2.7
Uncanny Groups for LearnDash <= 6.1.0.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for au…
-
Low 3.3
BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web …