Lucene search
+L

1130 matches found

Cvelist
Cvelist
•added 2024/07/30 6:00 a.m.•38 views

CVE-2024-1286 Paid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site...

0.00565EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/30 12:00 a.m.•14 views

PT-2024-29517 · Priority · Pri Web Portal Add-On For Priority Erp

Name of the Vulnerable Software and Affected Versions: PRI WEB Portal Add-On for Priority ERP on prem affected versions not specified Description: The issue concerns exposure of sensitive information to an unauthorized actor, as described by CWE-200. Recommendations: At the moment, there is no...

7.5CVSS6.7AI score0.00402EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•4 views

CVE-2024-41696: Exposure of Sensitive Information to an Unauthorized Actor

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

7.5CVSS5.7AI score0.00402EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•7 views

CVE-2024-4544: Authentication Bypass Using an Alternate Path or Channel

The Pie Register - Social Sites Login Add on plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticate...

9.8CVSS5.7AI score0.00581EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/24 12:00 a.m.•7 views

PT-2024-31629

Name of the Vulnerable Software and Affected Versions: The Pie Register - Social Sites Login Add on plugin for WordPress versions up to, and including, 1.7.7 PHP versions 8.3 up to 8.3.8 PHP versions 8.2 up to 8.2.20 PHP versions 8.1 up to 8.1.29 Description: The issue is due to insufficient...

9.8CVSS5.7AI score0.00581EPSS
SaveExploits0References6
NVD
NVD
•added 2024/05/03 3:16 a.m.•24 views

CVE-2023-47220

An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5...

6.6CVSS6.7AI score0.01191EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/03 2:32 a.m.•67 views

CVE-2023-47220

The CVE-2023-47220 issue affects the Media Streaming add-on prior to version 500.1.1.5. It describes an OS command injection vulnerability that could allow an authenticated administrator to execute commands over the network. The fixed release is Media Streaming add-on 500.1.1.5 (2024-01-22) and l...

6.6CVSS7.5AI score0.01191EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/05/03 2:32 a.m.•28 views

CVE-2023-47220 Media Streaming add-on

An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5...

6.6CVSS7AI score0.01191EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•17 views

Media Streaming add-on 操作系统命令注入漏洞

Media Streaming add-on is a media streaming add-on. An operating system command injection vulnerability exists in Media Streaming Add-on versions prior to 500.1.1.5 2024/01/22 , which stems from the presence of an operating system command injection vulnerability that allows an authenticated...

6.6CVSS7.7AI score0.01191EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•4 views

CVE-2023-47220: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5...

6.6CVSS6AI score0.01191EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/26 3:15 p.m.•25 views

CVE-2023-47222

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on...

9.8CVSS9AI score0.00544EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/26 3:01 p.m.•9 views

CVE-2023-47222 Media Streaming add-on

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on...

9.6CVSS6.5AI score0.00544EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/26 3:01 p.m.•70 views

CVE-2023-47222

CVE-2023-47222 affects the Media Streaming add-on and is described as an exposure of sensitive information vulnerability that could allow a remote attacker to compromise system security over the network. The vulnerability impacts versions prior to 500.1.1.5, with a fix released in Media Streaming...

9.8CVSS5.7AI score0.00544EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•3 views

CVE-2023-47222: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on...

9.8CVSS5.7AI score0.00544EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2024/04/04 12:00 a.m.•19 views

Paid Memberships Pro – Payfast Gateway Add On < 1.4.2 - Unauthenticated Information Exposure

Description The Paid Memberships Pro – Payfast Gateway Add On plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.1 via log files. This makes it possible for unauthenticated attackers to extract potentially sensitive information from log...

5.3CVSS6.5AI score0.0047EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/03/31 7:15 p.m.•29 views

CVE-2024-30523

Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Mailchimp Add On pmpro-mailchimp.This issue affects Paid Memberships Pro – Mailchimp Add On: from n/a through 2.3.4...

5.3CVSS5.3AI score0.00444EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/31 6:11 p.m.•90 views

CVE-2024-30523

Technical details about CVE-2024-30523 are not provided in the supplied documents. No affected product/version or remediation steps are disclosed here; monitor for official advisories for updates.

5.3CVSS8.6AI score0.00444EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/31 6:11 p.m.•36 views

CVE-2024-30523 WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Mailchimp Add On pmpro-mailchimp.This issue affects Paid Memberships Pro – Mailchimp Add On: from n/a through 2.3.4...

5.3CVSS5.6AI score0.00444EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•4 views

CVE-2024-30523: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Mailchimp Add On pmpro-mailchimp.This issue affects Paid Memberships Pro – Mailchimp Add On: from n/a through 2.3.4...

5.3CVSS5.8AI score0.00444EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/29 3:40 p.m.•97 views

CVE-2024-30514

CVE-2024-30514 affects Paid Memberships Pro – Payfast Gateway Add On for WordPress, with the vulnerability described as an insertion of sensitive information into the log file. The issue affects the Payfast gateway add-on versions up to 1.4.1. The connected Red Hat entry reproduces the same descr...

5.3CVSS8.6AI score0.0047EPSS
SaveExploits0References1
Rows per page
Query Builder