EUVD-2022-39100

Malicious code in bioql PyPI...

CVE-2022-36387

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

Improper access control

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36387 WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36387

CVE-2022-36387 affects the WordPress plugin About Me (versions ≤ 1.0.12). The issue is described as a Broken Access Control vulnerability, enabling an authenticated user (e.g., a Subscriber) to perform unsafe actions via AJAX, including arbitrary network creation/deletion . This stems from insuff...