Skip to content
OpenAdvisories

Archive

September 2024

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2023-5359 Public exploit

    W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext

    The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to…