Lucene search
K

8 matches found

OSV
OSV
added 2026/06/05 8:33 p.m.4 views

GHSA-H4MP-G9C6-XWPH Shopper: Missing authorization on Product admin Livewire sub-form components

Impact Sub-form Livewire components used in the product editor Edit, Inventory, Seo, Shipping, Files had no authorization on their store method. Any authenticated panel user, regardless of role, could mutate any product's pricing, stock, SEO metadata, shipping dimensions, and attached media witho...

6.5CVSS5.6AI score0.00221EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-50334

Malicious code in bioql PyPI...

5.3CVSS9AI score0.00337EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:14 a.m.5 views

CVE-2023-46073

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

5.3CVSS7.3AI score0.00337EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.5 views

CVE-2023-46073

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

5.3CVSS0.00337EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/02 11:59 a.m.17 views

CVE-2023-46073 WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

5.3CVSS0.00337EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 11:59 a.m.9 views

CVE-2023-46073 WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

5.3CVSS7.3AI score0.00337EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.4 views

WordPress plugin DX Delete Attached Media 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

5.3CVSS8.7AI score0.00337EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-1499 · Nofearinc · Dx Delete Attached Media

Name of the Vulnerable Software and Affected Versions: nofearinc DX Delete Attached Media versions 2.0.5.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in nofearinc DX Delete Attached Media, which allows exploiting incorrectly configured access control...

5.3CVSS9.4AI score0.00337EPSS
Exploits0References4
Rows per page
Query Builder