Skip to content
OpenAdvisories

Archive

27 December 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2024-11605 Public exploit

    WP Publications <= 1.2 - Admin+ Stored XSS

    The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is…

  • Medium 5.9
    CVE-2024-53476 Public exploit

    A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to …