Skip to content
OpenAdvisories

Archive

29 October 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-7985 Public exploit

    FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload

    The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in all versions up to, and including, 1.0.9. This makes it pos…

  • High 8.1
    CVE-2024-48955 Public exploit

    Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the funct…