Skip to content
OpenAdvisories

Archive

26 October 2024

Vulnerabilities first published on this day (UTC), newest first.

← September 2024 2024 / October /26 November 2024 →
  1. 1110
  2. 292
  3. 363
  4. 489
  5. 582
  6. 685
  7. 7110
  8. 8234
  9. 9125
  10. 10119
  11. 11132
  12. 1222
  13. 1318
  14. 1477
  15. 15188
  16. 16185
  17. 17157
  18. 1879
  19. 1924
  20. 2068
  21. 21433
  22. 2283
  23. 23120
  24. 24111
  25. 25136
  26. 2644
  27. 2735
  28. 28193
  29. 29208
  30. 3096
  31. 3171
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9932 Public exploit EPSS 38%

    Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

    The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to u…

    jurredeklijn Wux Blog Editor Web / CMS
  • High 8.8
    CVE-2024-9890 Public exploit

    User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass

    The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber…

    deryck User Toolkit Web / CMS
  • Critical 9.8
    CVE-2024-9933 Public exploit

    WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check

    The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. This is due to the 'watchtower_ota_token' default value is empty, and the not empty check is missing in the 'Password_Less_Access::login' fu…

    watchtowerhq WatchTowerHQ Web / CMS