Lucene search
+L

17 matches found

Kitploit
Kitploit
added 2026/09/11 5:52 a.m.6 views

agency-toolkit-1023-missing-authorization-to-unauthenticated-arbitrary-options-update

NoCVE Agency Toolkit = 1.0.23 - 인가 누락으로 인한 비인증 임의 옵션 업데이트 설명 WordPress용 Agency Toolkit 플러그인은 1.0.23 이하의 모든 버전에서 'agencytoolkitimport' 액션에 대한 권한capability 검사가 누락되어, 권한 상승으로 이어질 수 있는 무단 데이터 수정에 취약합니다. 이로 인해 인증되지 않은 공격자가 WordPress 사이트의 임의 옵션을 업데이트할 수 있습니다. 이를 악용하여 등록 기본 역할을 관리자administrator로 변경하고 사용...

6AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-52964

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00664EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-9167

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00355EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/03 4:18 p.m.14 views

CVE-2025-31863

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through = 1.0.24...

5.3CVSS7.2AI score0.00355EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/01 4:06 p.m.9 views

WordPress Agency Toolkit plugin <= 1.0.24 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Agency Toolkit versions = 1.0.24...

5.3CVSS8.5AI score0.00355EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/01 3:16 p.m.27 views

CVE-2025-31863

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through = 1.0.24...

5.3CVSS0.00355EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:52 p.m.55 views

CVE-2025-31863

CVE-2025-31863 is a Missing Authorization vulnerability affecting the Agency Toolkit WordPress plugin. The Connected Wordfence bulletin lists it under “Agency Toolkit

5.3CVSS7.2AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:52 p.m.38 views

CVE-2025-31863 WordPress Agency Toolkit plugin <= 1.0.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through = 1.0.24...

5.3CVSS0.00355EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.12 views

WordPress plugin Agency Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.4AI score0.00355EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 9:22 a.m.12 views

CVE-2024-56066

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...

9.8CVSS5.9AI score0.00664EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/31 2:15 p.m.16 views

CVE-2024-56066

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...

9.8CVSS0.00664EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/31 1:20 p.m.68 views

CVE-2024-56066

CVE-2024-56066 concerns the WordPress Plugin “Agency Toolkit” with versions 1.0.0 through 1.0.23 affected by a Missing Authorization vulnerability that enables Privilege Escalation. Affected component: Agency Toolkit plugin code path handling authorization. Impact per CVSSv3.1: high confidentiali...

9.8CVSS5.9AI score0.00664EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/31 1:20 p.m.33 views

CVE-2024-56066 WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...

9.8CVSS0.00664EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/31 1:20 p.m.11 views

CVE-2024-56066 WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability

Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...

9.8CVSS5.2AI score0.00664EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/31 12:00 a.m.29 views

PT-2024-36700 · Unknown · Inspry Agency Toolkit

Name of the Vulnerable Software and Affected Versions: Inspry Agency Toolkit versions 1.0.0 through 1.0.23 Description: The issue is related to a Missing Authorization vulnerability that allows Privilege Escalation in the Inspry Agency Toolkit. Recommendations: For versions 1.0.0 through 1.0.23,...

9.8CVSS7.1AI score0.00664EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.11 views

WordPress plugin Agency Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.6AI score0.00664EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/18 2:00 p.m.7 views

WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Agency Toolkit versions = 1.0.23...

9.8CVSS7AI score0.00664EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder