2023-11-21

2023-11-22

2023-11-23

All (3) Critical (7) High (62) Medium (80) Low (3)

CVE-2023-6160 Nov 22, 16:15 LOW Monitor

The LifterLMS - WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 7.4.2 via the maybe_serve_export function. Rated low severity (CVSS 3.3), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Path Traversal Lifterlms

NVD VulDB

CVSS 3.1

3.3

EPSS

1.5%

CVE-2023-43081 Nov 22, 13:15 LOW PATCH Monitor

PowerProtect Agent for File System Version 19.14 and prior, contains an incorrect default permissions vulnerability in ddfscon component. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Privilege Escalation Dell Powerprotect Agent For File System

NVD

CVSS 3.1

3.3

EPSS

0.2%

CVE-2023-6164 Nov 22, 16:15 LOW PATCH Monitor

The MainWP Dashboard - WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘newColor’ parameter in all versions up to, and including,. Rated low severity (CVSS 2.2), this vulnerability is remotely exploitable.

WordPress Code Injection Mainwp

NVD VulDB

CVSS 3.1

2.2

EPSS

0.1%