10 matches found
CVE-2025-48138
Missing Authorization vulnerability in Bertha AI - Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...
CVE-2025-48138
Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...
CVE-2025-48138 WordPress BERTHA AI plugin <= 1.13 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...
CVE-2025-48138
BERTHA AI WordPress plugin (versions up to 1.12.11) is affected by a Missing Authorization vulnerability (broken access control). The CVE entry notes exploitation of incorrectly configured access control security levels, with CVSS v3.1 metrics indicating HIGH impact to confidentiality, integrity,...
CVE-2025-48138 WordPress BERTHA AI plugin <= 1.13 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...
WordPress BERTHA AI plugin <= 1.13 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by astra.r3verii in WordPress Plugin BERTHA AI versions = 1.13...
CVE-2024-48138
A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...
CVE-2024-48138
A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...
CVE-2022-48138
...
CVE-2022-48138
CVE-2023-26829 describes an authentication bypass in the Password Reset component of Gladinet CentreStack prior to version 13.5.9808, allowing remote attackers to set a new password for any valid user account and bypass authentication. CVE-2022-48138 is a reservation/duplicate entry of CVE-2023-2...