CVE-2023-49818

CVE-2023-49818 affects the WordPress plugin Webflow Pages (Webflow Pages) up to version 1.0.8. The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access. CVSS v3.1 base score is 5.3 (Medium). Red Hat and Patchs...

CVE-2023-49861

CVE-2023-49861 describes a Missing Authorization vulnerability in the WordPress plugin Social Media Feather (versions ≤ 2.1.3). The issue is attributed to broken access control / improperly configured access security levels , enabling unauthorized access to privileged functions. The CVE entry lis...

CVE-2023-49831

CVE-2023-49831 is a Missing Authorization (Broken Access Control) vulnerability in WordPress plugin RegistrationMagic (RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login) affecting versions up to 5.2.3.0. The issue, arising from incorrectly configured access...

CVE-2023-49859

CVE-2023-49859 concerns WordPress plugin Login With Ajax (

CVE-2023-49835

CVE-2023-49835 affects the WordPress plugin Post Duplicator (versions up to 2.31). The issue is described as a Missing Authorization / Broken Access Control vulnerability allowing unauthorized access due to incorrectly configured access control. The vulnerability and its CVE are corroborated by P...

CVE-2023-49858

CVE-2023-49858 refers to the WordPress Custom Login plugin. Affected versions are

CVE-2023-49850

CVE-2023-49850 – WordPress WP Simple HTML Sitemap : Affected plugin versions are ≤ 2.7. Root cause is broken access control due to missing authorization checks, allowing unauthenticated access to perform an unauthorized action. CVSS v3.1 base score is 5.3 (Medium) per Patchstack, and reports cons...

CVE-2023-49857

CVE-2023-49857 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Awesome Support . Affected versions are up to 6.1.7 ; unauthenticated users could exploit misconfigured access controls. The PatchStack entry confirms a fix in 6.1.8 . NVD/CVSS data show a 6.5 (M...

CVE-2023-50373

CVE-2023-50373 affects the WordPress Alt Manager plugin (versions

CVE-2023-50876

CVE-2023-50876 is a missing authorization/vulnerability in the Molongui WordPress plugin, described as a broken access control that allows exploitation of incorrectly configured access control security levels. The issue affects Molongui versions from n/a up to 4.7.3. Public sources in the connect...

CVE-2023-50884

CVE-2023-50884 concerns LA-Studio Element Kit for Elementor. Affected: LA-Studio Element Kit for Elementor 1.1.5 per the PT Security advisory; details on exact fixed version are not specified beyond “later than 1.1.5.” Monitor for updates from official advisories for precise patched build.

CVE-2023-51362

CVE-2023-51362 affects the WordPress plugin All-in-one Floating Contact Form – My Sticky Elements (versions ≤ 2.1.3). It describes a Missing Authorization/ improper access control vulnerability with a CVSS v3.1 base score of 5.3 (Medium). Multiple connected sources corroborate a broken access con...

CVE-2023-49845

CVE-2023-49845 is a Broken Access Control vulnerability affecting the WordPress Redirects plugin (versions up to and including 1.2.1, Loud Dog Redirects naming in some sources). The root cause described across sources is “Missing Authorization” / incorrectly configured access control, enabling an...

CVE-2018-9386

CVE-2018-9386 concerns the HTC reboot_block driver. The reboot_block_command may trigger a stack buffer overflow due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction required. Connected sources (NVD, Red Hat, CVE lists) confirm the issue descriptio...

CVE-2018-9463

The vulnerability CVE-2018-9463 affects the touchscreen path in the Android kernel: In sw49408_irq_runtime_engine_debug (touch_sw49408.c), there is an out-of-bounds write caused by an incorrect bounds check. This can enable local privilege escalation with System execution privileges required and ...

CVE-2018-9462

CVE-2018-9462 describes an out-of-bounds write in the Android kernel component ftm4_pdc.c, within the store_cmd function, caused by an incorrect bounds check. This can enable local escalation of privilege to system execution privileges, with no user interaction required. The description specifies...

CVE-2018-9416

CVE-2018-9416 concerns memory corruption in the Linux kernel SCSI driver, specifically in sg_remove_scat (scsi/sg.c). The root cause is described as an unusual root cause leading to local escalation of privilege with System execution privileges needed; no user interaction required. Connected docu...

CVE-2018-9408

The CVE-2018-9408 issue affects the GPS subsystem, specifically the m3326_gps_write and m3326_gps_read handlers in gps.s. The vulnerability is described as an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system execution privileges required. Expl...

CVE-2018-9407

CVE-2018-9407 : In emmc_rpmb_ioctl of emmc_rpmb.c there is a Missing Bounds Check, leading to potential information disclosure of kernel data. Connected sources confirm this issue on Google Pixel devices and reference the Android Pixel/Nexus security bulletin, which states that patch levels of 20...

CVE-2018-9404

The CVE-2018-9404 issue affects Google Pixel/Nexus devices and is centered on the oemCallback function in ril.cpp, where an out-of-bounds write can result from an integer overflow. This could enable local elevation of privilege with System execution privileges required, and exploitation does not ...