Archive
29 October 2024
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
High 7.5CVE-2024-7985 Public exploit
FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload
The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in all versions up to, and including, 1.0.9. This makes it pos…
-
High 8.1CVE-2024-48955 Public exploit
Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the funct…