Skip to content
OpenAdvisories

Archive

18 December 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-12025 Public exploit Scanner template

    Collapsing Categories <= 3.0.8 - Unauthenticated SQL Injection

    The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied para…

  • High 8.8
    CVE-2024-56116 Public exploit

    A Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allows remote attackers to create an administrator…