Skip to content
OpenAdvisories

Archive

1 October 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-9224 Public exploit

    Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read

    The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read …

  • Medium 4.7
    CVE-2024-31835 Public exploit

    Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code v…

  • Medium 5.6
    CVE-2024-44610 Public exploit

    PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via s…