Skip to content
OpenAdvisories

Archive

13 June 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-5815 Public exploit

    Traffic Monitor <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update

    The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcm_maybe_set_bot_flags() function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated at…