Lucene search
K

10 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/27 9:49 a.m.4 views

CVE-2026-42749

Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types Remove comments comments-plus allows Password Recovery Exploitation.This issue affects Disable Comments for Any Post Types Remove comments: from n/a through = 1.3.0...

7.1CVSS5.8AI score0.00052EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/27 9:49 a.m.26 views

CVE-2026-42749 WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types Remove comments comments-plus allows Password Recovery Exploitation.This issue affects Disable Comments for Any Post Types Remove comments: from n/a through = 1.3.0...

7.1CVSS0.00052EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/15 12:47 a.m.3 views

CVE-2024-42749

Cross Site Scripting vulnerability in Alto CMS v.1.1.13 allows a local attacker to execute arbitrary code via a crafted script...

6.1CVSS6.7AI score0.00038EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:21 a.m.8 views

CVE-2023-42749

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.5CVSS6.4AI score0.00023EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 6:47 p.m.3 views

CVE-2021-42749

In Beaver Themer, attackers can bypass conditional logic controls for hiding content when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set...

5.3CVSS6.9AI score0.00237EPSS
Exploits1
Circl
Circl
added 2023/12/23 8:1 a.m.0 views

CVE-2023-42749

creationtimestamp| type| source ---|---|--- 2023-12-23 08:01:33+00:00| seen| https://t.me/ctinow/158713...

5.5CVSS5.5AI score0.00023EPSS
Exploits0References1
CVE
CVE
added 2023/12/04 12:54 a.m.41 views

CVE-2023-42749

CVE-2023-42749 affects the EngineerMode service in UNISOC chipsets. The vulnerability arises from a missing permission check in enginnermode, enabling an attacker with local access to write permission usage records and potentially disclose information. According to NVD metrics, it is a Local, Low...

5.5CVSS5.3AI score0.00023EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/04 12:54 a.m.10 views

CVE-2023-42749

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

6.4AI score0.00023EPSS
Exploits0References1
Circl
Circl
added 2022/11/03 11:26 p.m.0 views

CVE-2022-42749

creationtimestamp| type| source ---|---|--- 2022-11-03 23:26:11+00:00| seen| https://t.me/cibsecurity/52546...

6.1CVSS6.1AI score0.02714EPSS
Exploits1References1
CVE
CVE
added 2022/01/07 6:9 p.m.38 views

CVE-2021-42749

CVE-2021-42749 affects Beaver Themer (WordPress plugin). The vulnerability lets attackers bypass conditional logic controls used to hide content when viewing post archives, provided a Themer layout is applied to the archives and the post excerpt field is not set. This is a straightforward logic b...

5.3CVSS5.3AI score0.00237EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder