Skip to content
OpenAdvisories

Archive

13 December 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.5

    WordPress Analytify plugin <= 5.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.1.0.

  • Low 3.5

    WordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Maker: from n/a through 1.17.1.

  • Low 3.5

    Missing security header: Referrer-Policy URL

    This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers.

  • Low 3.7

    AR for WordPress <= 7.3 - Missing Authorization to Unauthenticated Limited File Upload

    The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticate…