Lucene search
K

43 matches found

RedhatCVE
RedhatCVE
added 2026/04/10 1:23 a.m.3 views

CVE-2026-39627

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through = 2.266...

4.3CVSS5.9AI score0.00033EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.1 views

EUVD-2026-20275

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through = 2.266...

5.9AI score0.00033EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.1 views

CVE-2026-39627

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through = 2.266...

4.3CVSS0.00033EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.0 views

CVE-2026-39627

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through = 2.266...

5.9AI score0.00033EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.20 views

CVE-2026-39627 WordPress Ashe theme <= 2.266 - Broken Access Control vulnerability

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through = 2.266...

4.3CVSS0.00033EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.4 views

CVE-2026-39627

CVE-2026-39627 is associated with the WordPress theme Ashe (vulnerable up to version 2.266). The issue is described as a Missing Authorization vulnerability caused by “Exploiting Incorrectly Configured Access Control Security Levels,” enabling access control bypass. Affected product/component: Wo...

4.3CVSS5.9AI score0.00033EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.4 views

WordPress plugin Ashe 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...

4.3CVSS5.8AI score0.00033EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.3 views

PT-2026-31192

CVE-2026-39627 Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a thr… https://t.co/kSRi6TSZHk...

4.3CVSS5.8AI score0.00033EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-50340

Malicious code in bioql PyPI...

5.4CVSS9.1AI score0.00107EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-36936

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00129EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49880

Malicious code in bioql PyPI...

6.1CVSS8.6AI score0.0261EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53042

Malicious code in bioql PyPI...

5.4CVSS8.7AI score0.00132EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.2 views

CVE-2024-56244

Missing Authorization vulnerability in WP Royal Ashe Extra ashe-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through = 1.2.92...

5.4CVSS7.2AI score0.00132EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:14 a.m.2 views

CVE-2024-9777

The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.243. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execut...

6.1CVSS5.6AI score0.0261EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:56 a.m.2 views

CVE-2024-37478

Cross-Site Request Forgery CSRF vulnerability in wproyal Ashe ashe allows Cross Site Request Forgery.This issue affects Ashe: from n/a through = 2.233...

4.3CVSS5.9AI score0.00129EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:4 a.m.4 views

CVE-2023-46079

Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through 1.2.9...

5.4CVSS8.5AI score0.00107EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.10 views

CVE-2024-56244

Missing Authorization vulnerability in WP Royal Ashe Extra ashe-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through = 1.2.92...

5.4CVSS0.00132EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.6 views

CVE-2024-37478

Cross-Site Request Forgery CSRF vulnerability in wproyal Ashe ashe allows Cross Site Request Forgery.This issue affects Ashe: from n/a through = 2.233...

4.3CVSS0.00129EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.4 views

CVE-2023-46079

Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through 1.2.9...

5.4CVSS0.00107EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:1 p.m.7 views

CVE-2024-56244 WordPress Ashe Extra plugin <= 1.2.92 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Royal Ashe Extra ashe-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through = 1.2.92...

5.4CVSS7.2AI score0.00132EPSS
Exploits0References1
Rows per page
Query Builder