The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.8 via the 'file' parameter which does not properly restrict files to be edited. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.
Path Traversal
WordPress
Simple
NVD
VulDB
CVSS 3.1
3.8
EPSS
0.3%
RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. Rated low severity (CVSS 2.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Rtl8111Ep Cg Firmware
Rtl8111Fp Cg Firmware
NVD
CVSS 3.1
2.1
EPSS
0.2%