2137 matches found
CVE-2023-28120
There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input...
CVE-2023-27539
There is a denial of service vulnerability in the header parsing component of Rack...
CVE-2023-35685
CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...
PT-2025-2693 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A request was rejected because it was reserved but not necessary, leading to an unused vulnerability patch. Recommendations: At the moment, there is no information about a newer...
CVE-2022-41995
CVE-2022-41995 concerns the WordPress plugin Gallery Images Ape, affected versions 2.2.8 and earlier. Multiple connected sources describe a Missing Authorization / Broken Access Control vulnerability, caused by incorrectly configured access control security levels in the Gallery Images Ape plugin...
CVE-2022-43476
CVE-2022-43476 relates to the WordPress plugin Subscribe to Category (affected versions:
CVE-2023-48739
CVE-2023-48739 affects the Porto Theme - Functionality WordPress plugin (pre-2.12.1). The issue is a Missing/Broken Access Control vulnerability allowing unauthenticated access due to incorrectly configured authorization. The CVSSv3.1 base score is 5.3 (Medium) with Low availability impact per Pa...
CVE-2023-47692
CVE-2023-47692 is a WordPress Flo Forms plugin vulnerability (affected versions
CVE-2023-47689
CVE-2023-47689 corresponds to a Missing Authorization (Broken Access Control) issue in the WordPress Animator plugin (versions <= 3.0.10) where unauthenticated users can change plugin settings. The vulnerability is documented with CVSS 3.1/6.5 (Medium) and is explicitly mitigated by a fix in v...
CVE-2023-47557
CVE-2023-47557 refers to a Missing Authorization vulnerability in the WordPress plugin Visitors Traffic Real Time Statistics (versions
CVE-2023-47523
CVE-2023-47523 is a Missing Authorization vulnerability in the WordPress plugin Auto Tag Creator (
CVE-2023-47225
CVE-2023-47225 affects the WordPress Short URL plugin (shorten-url) version 1.6.8 and earlier. The issue is a Missing Authorization/broken access control allowing exploitation via multiple AJAX functions, as documented in Patchstack and CVE records. Public details consistently state affected vers...
CVE-2023-47188
CVE-2023-47188 affects the WordPress plugin Simple Job Board (versions
CVE-2023-47183
CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions
CVE-2023-47180
CVE-2023-47180 affects the WordPress plugin Finale Lite (XLPlugins Finale Lite) with Missing Authorization, allowing unauthenticated users to delete content due to incorrectly configured access control. Public sources in the Connected Documents confirm the vulnerable range as Finale Lite versions...
CVE-2023-47179
CVE-2023-47179 concerns the WordPress plugin WooODT Lite (ByConsole) with versions
CVE-2023-46635
CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...
CVE-2023-46632
CVE-2023-46632 : WordPress plugin My Shortcodes