Exploit for CVE-2025-4631

🚨 CVE-2025-4631 - Profitori WordPress Plugin Privilege Escala...

CVE-2025-4631 Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint

The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktendobject endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the saveobjectasuser function for objects whose 'datatype' is set to 'users',. This allows...

CVE-2025-4631 Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint

The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktendobject endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the saveobjectasuser function for objects whose 'datatype' is set to 'users',. This allows...

CVE-2022-4631

A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b925449c84faa9b7496abe4f8f5661cb5eb3bf. ...

CVE-2013-4631

Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of service device crash via malformed SNMPv3 requests that leverage unspecified overflow issues...

CVE-2023-4631

The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing...

CVE-2023-4631 DoLogin Security < 3.7 - IP Spoofing

The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing...

CVE-2023-4631 DoLogin Security < 3.7 - IP Spoofing

The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing...

CVE-2023-4631

The DoLogin Security WordPress plugin (versions prior to 3.7) is affected. The root cause is the plugin using headers like X-Forwarded-For to obtain the request IP, which can enable IP spoofing. Public sources (NVD/Red Hat and related advisories) indicate the affected product and version, with CV...

CVE-2018-4631

Rejected reason: This candidate is unused by its CNA...

CVE-2022-4631

creationtimestamp| type| source ---|---|--- 2022-12-21 22:13:11+00:00| seen| https://t.me/cibsecurity/55080...

CVE-2022-4631

CVE-2022-4631 affects WP-Ban, via an unknown function in ban-options.php that enables cross-site scripting. Exploitation is remote; the patch 22b925449c84faa9b7496abe4f8f5661cb5eb3bf is available and upgrading the affected component is recommended. The connected documents confirm the vulnerabilit...

CVE-2022-4631 WP-Ban ban-options.php cross site scripting

A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b925449c84faa9b7496abe4f8f5661cb5eb3bf. ...

CVE-2022-4631 WP-Ban ban-options.php cross site scripting

A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b925449c84faa9b7496abe4f8f5661cb5eb3bf. ...

Ubuntu 20.04 LTS : libmaxminddb vulnerability (USN-4631-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4631-1 advisory. It was discovered that libmaxminddb incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause applications using...

Security Bulletin: Incorrect permissions on IBM Spectrum Protect Plus agent files (CVE-2020-4631)

Summary IBM Spectrum Protect Plus agent files on Windows have incorrect access permissions. Vulnerability Details CVEID: CVE-2020-4631 DESCRIPTION: IBM Spectrum Protect Plus agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which...

CVE-2020-4631

Summary of CVE-2020-4631 (IBM Spectrum Protect Plus) : Affects IBM Spectrum Protect Plus versions 10.1.0–10.1.6. In Windows, agent files in non-default configurations have permissions allowing access to everyone with full control, enabling a local user to potentially interrupt service operations....

Debian DSA-4631-1 : pillow - security update

Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrary code if malformed PCX, FLI, SGI or TIFF images are processed. C Tenable Network Security, Inc. The descriptive text and package checks i...

Debian: Security Advisory (DSA-4631-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-4631

IBM Security Secret Server 10.7 and all versions are affected by CVE-2019-4631, an open redirect vulnerability that could enable remote attackers to conduct phishing by steering victims to a crafted site and spoofing the displayed URL to appear trusted. The underlying issue is an open redirect in...