17 matches found
agency-toolkit-1023-missing-authorization-to-unauthenticated-arbitrary-options-update
NoCVE Agency Toolkit = 1.0.23 - 인가 누락으로 인한 비인증 임의 옵션 업데이트 설명 WordPress용 Agency Toolkit 플러그인은 1.0.23 이하의 모든 버전에서 'agencytoolkitimport' 액션에 대한 권한capability 검사가 누락되어, 권한 상승으로 이어질 수 있는 무단 데이터 수정에 취약합니다. 이로 인해 인증되지 않은 공격자가 WordPress 사이트의 임의 옵션을 업데이트할 수 있습니다. 이를 악용하여 등록 기본 역할을 관리자administrator로 변경하고 사용...
EUVD-2024-52964
Malicious code in bioql PyPI...
EUVD-2025-9167
Malicious code in bioql PyPI...
CVE-2025-31863
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through = 1.0.24...
WordPress Agency Toolkit plugin <= 1.0.24 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Agency Toolkit versions = 1.0.24...
CVE-2025-31863
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through = 1.0.24...
CVE-2025-31863
CVE-2025-31863 is a Missing Authorization vulnerability affecting the Agency Toolkit WordPress plugin. The Connected Wordfence bulletin lists it under “Agency Toolkit
CVE-2025-31863 WordPress Agency Toolkit plugin <= 1.0.24 - Broken Access Control vulnerability
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through = 1.0.24...
WordPress plugin Agency Toolkit 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-56066
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...
CVE-2024-56066
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...
CVE-2024-56066
CVE-2024-56066 concerns the WordPress Plugin “Agency Toolkit” with versions 1.0.0 through 1.0.23 affected by a Missing Authorization vulnerability that enables Privilege Escalation. Affected component: Agency Toolkit plugin code path handling authorization. Impact per CVSSv3.1: high confidentiali...
CVE-2024-56066 WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...
CVE-2024-56066 WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...
PT-2024-36700 · Unknown · Inspry Agency Toolkit
Name of the Vulnerable Software and Affected Versions: Inspry Agency Toolkit versions 1.0.0 through 1.0.23 Description: The issue is related to a Missing Authorization vulnerability that allows Privilege Escalation in the Inspry Agency Toolkit. Recommendations: For versions 1.0.0 through 1.0.23,...
WordPress plugin Agency Toolkit 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Agency Toolkit versions = 1.0.23...