Skip to content
OpenAdvisories

Archive

13 January 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-11396 Public exploit Scanner template

    Event monster <= 1.4.3 - Information Exposure Via Visitors List Export

    The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-…

  • Medium 4.3
    CVE-2025-22828 Public exploit

    Apache CloudStack: Unauthorised access to annotations

    CloudStack users can add and read comments (annotations) on resources they are authorised to access.  Due to an access validation issue that affects Apache CloudStack versions from 4.16.0, users who have access, prior access or knowledge of resource UUIDs can…

  • Medium 6.5
    CVE-2024-57487 Public exploit

    In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types …