CVE-2024-23524

CVE-2024-23524 is a Broken Access Control vulnerability in the PilotPress plugin for WordPress. Affected versions are

CVE-2024-25929

CVE-2024-25929: WordPress plugin Product Catalog Enquiry for WooCommerce by MultiVendorX

CVE-2023-52230

CVE-2023-52230 affects Booster Plus for WooCommerce, where versions prior to 7.1.3 expose an authenticated arbitrary WordPress option disclosure due to missing authorization. The issue is a missing authorization vulnerability that could allow a user with at least subscriber privileges to view or ...

CVE-2024-22151

CVE-2024-22151 affects WordPress plugin Import and export users and customers (Codection) up to version 1.24.6, due to Missing Authorization via the fire_cron REST endpoint. Unauthenticated access could trigger plugin cron functionality; CVSS 3.1 base score listed as 5.3 (Medium). Connected sourc...

CVE-2024-31969

CVE-2024-31969 is a local privilege-escalation in sudo via sudoedit. The flaw, introduced in sudo 1.9.0, stems from improper validation of user environment variables and file ownership in sudoedit, enabling a local user with sudoedit access to modify files as root (e.g., via SUDO_EDITOR or symlin...

CVE-2024-5761

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-5260. Reason: This candidate is a reservation duplicate of CVE-2024-5260. Notes: All CVE users should reference CVE-ID instead of this candidate. All references and descriptions in this candidate have been removed to...

GO-2024-2664 ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel

ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

CVE-2020-35154

Rejected reason: CVE ID was once reserved, but never used...

CVE-2020-27354

Rejected reason: CVE ID was once reserved, but never used...

CVE-2023-50804

CVE-2023-50804 concerns Samsung baseband/modem software in Exynos devices where NAS (Non-Access‑Stratum) format type checking is insufficient, enabling authentication bypass in the baseband stack. The issue affects multiple Exynos SoCs (e.g., Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/...

CVE-2023-49927

CVE-2023-49927 affects Samsung Mobile Processor, Wearable Processor, and Modem Exynos families (980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, and related modems). The baseband software fails to properly validate the RRC format types, leading to insufficient encryption. This is de...

CVE-2024-25600

Bricks Builder (WordPress) is affected up to version 1.9.6 with an unauthenticated remote code execution via the vulnerable REST endpoint /wp-json/bricks/v1/render_element. The root cause is in Bricks\Query::prepare_query_vars_from_settings where user input from the queryEditor is passed directly...

CVE-2023-52176

CVE-2023-52176 describes an Authentication Bypass by Spoofing in the Miniorange Malware Scanner (WordPress plugin). Affected products: Malware Scanner from n/a through version 4.7.1. Root cause per entry: bypasses access controls (ACLs) through spoofed authentication, enabling access to functiona...

CVE-2023-52147

CVE-2023-52147 concerns the WordPress plugin All In One WP Security & Firewall (AIOS)

CVE-2023-51667

CVE-2023-51667 affects the Rate my Post – WP Rating System WordPress plugin (

CVE-2023-51544

CVE-2023-51544 affects the RegistrationMagic WordPress plugin (versions up to 5.2.5.0). It is a Form Submission Limit Bypass caused by improper control of interaction frequency; the vulnerability has been patched in a later release per Wordfence records (no exploit/vector details provided in the ...

CVE-2023-51543

CVE-2023-51543 describes an Authentication Bypass by Spoofing in the WordPress plugin RegistrationMagic (Metagauss) that allows bypassing ACL constraints to access restricted functionality. Affected versions are RegistrationMagic up to 5.2.5.0 (version range stated as n/a through 5.2.5.0). The vu...

CVE-2023-49774

CVE-2023-49774 concerns the WordPress plugin WP Photo Album Plus (versions up to 8.5.02.005). The Red Hat/NVD entries describe an Information Exposure/Bypass issue where unauthenticated users could bypass login protection by manipulating IP-related behavior. PatchStack confirms the vulnerability ...

CVE-2023-48753

CVE-2023-48753 covers a WordPress plugin issue in “Restricted Site Access” where IP address-based access control can be bypassed via IP spoofing. Affected plugin: Restricted Site Access (WordPress) up to and including version 7.4.1. The root cause is insufficient restriction of how IP information...

CVE-2023-48745

CVE-2023-48745 affects the WordPress plugin Captcha Code by WebFactory Ltd. It is caused by improper restriction of excessive authentication attempts, enabling a bypass of captcha protection. Affected versions are