Skip to content
OpenAdvisories

Archive

16 December 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.5
    CVE-2024-54374 Public exploit

    WordPress Sogrid plugin <= 1.5.6 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sabri Sogrid sogrid allows PHP Local File Inclusion.This issue affects Sogrid: from n/a through <= 1.5.6.

  • High 8.8
    CVE-2024-54378 Public exploit

    WordPress Quietly Insights plugin <= 1.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in Quietly Quietly Insights quietly-insights allows Privilege Escalation.This issue affects Quietly Insights: from n/a through <= 1.2.2.

  • High 8.8
    CVE-2024-54379 Public exploit

    WordPress Minterpress plugin <= 1.0.5 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in blokhauswp Minterpress minterpress allows Privilege Escalation.This issue affects Minterpress: from n/a through <= 1.0.5.

  • High 7.2
    CVE-2024-54385 Public exploit Scanner template

    WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through <= 2.0.83.

  • High 8.8
    CVE-2024-53376 Public exploit EPSS 11%

    CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the…