Skip to content
OpenAdvisories

Archive

14 June 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.1

    Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion

    The Zagg - Electronics & Accessories WooCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.1 via the load_view() function that is called via at least three AJAX actions: 'load_more_post…

  • High 7.2

    AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions

    The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the field_conditions parameter in all versions up to, and including, 5.2.3 due to insuff…

  • High 7.2

    File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload

    The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.8.8. This makes it possible for authenticated attackers, with Administrator-level access a…

  • High 8.5

    IBM Backup Recovery and Media Services for i code execution

    IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualified call made by a BRMS program. A malicious actor could cause user-controlle…