16 matches found
CVE-2026-12073
creationtimestamp| type| source ---|---|--- 2026-06-30 20:17:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjt37jnli2e...
CVE-2026-12073
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.9.9.5. This is due to the plugin not validating a userlogin on registration forms that don't contain this parameter, and...
CVE-2025-12073
creationtimestamp| type| source ---|---|--- 2026-02-11 13:55:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j...
CVE-2025-12073
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery against internal services by bypassing...
CVE-2020-12073
The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests...
CVE-2024-12073
The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slideurlvalue' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2024-12073 Meteor Slides <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slideurlvalue' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2024-12073
CVE-2024-12073 affects the Meteor Slides WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) in the slide_url_value parameter across all versions up to and including 1.5.7, arising from insufficient input sanitization and output escaping. Exploitation requires authenticatio...
CVE-2017-12073
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2020-12073
The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests...
CVE-2020-12073
The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests...
CVE-2020-12073
The CVE concerns the WordPress plugin responsive-add-ons (versions before 2.2.7). The underlying issue is incorrect access control in wp-admin/admin-ajax.php?action= requests, enabling unauthorized access to various AJAX actions. Reported impact ranges from guidance that an attacker could potenti...
CVE-2018-12073
An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...
CVE-2018-12073
CVE-2018-12073 affects Eminent EM4544 9.10 devices. The web interface does not require the current password to set a new one, allowing an attacker to change the admin password to a chosen value. This can be exploited in conjunction with an XSS vulnerability or at an unattended workstation. Root c...