Skip to content
OpenAdvisories

Archive

1 May 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-3143 Public exploit

    Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation

    The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_cli_cancel' function in all versions up to, and including, …

  • Medium 6.1
    CVE-2025-69606 Public exploit

    Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in …