Lucene search
+L

174 matches found

Vulnrichment
Vulnrichment
•added 2025/12/30 10:47 a.m.•9 views

CVE-2025-69030 WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through = 2.10.3...

5.4CVSS6.6AI score0.0022EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/30 10:47 a.m.•47 views

CVE-2025-69030 WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through = 2.10.3...

5.4CVSS0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•0 views

CVE-2025-69030: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through = 2.10.3...

5.4CVSS5.9AI score0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•16 views

PT-2025-53911

Name of the Vulnerable Software and Affected Versions Mikado-Themes Backpack Traveler versions through 2.10.3 Description An authorization bypass exists in Mikado-Themes Backpack Traveler due to incorrectly configured access control security levels. This allows exploitation through a...

6.6AI score0.0022EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•15 views

WordPress plugin Backpack Traveler 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS5.8AI score0.0022EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/29 3:40 p.m.•15 views

WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Backpack Traveler versions = 2.10.3...

5.4CVSS7AI score0.0022EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-2792

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.01311EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-3216

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00589EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-27960

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00785EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2019-3809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it shou...

10CVSS7.1AI score0.00861EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/07/24 2:09 a.m.•9 views

Malicious code in nodejs-backpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb99e7712a778eec132a6648afa1e407630ce06d816611aade3e1e1986562f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/25 1:19 p.m.•12 views

CVE-2025-39490

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects Backpack Traveler: from n/a through = 2.10.2...

8.1CVSS7.2AI score0.00785EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/23 1:15 p.m.•18 views

CVE-2025-39490

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects Backpack Traveler: from n/a through = 2.10.2...

8.1CVSS0.00785EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/23 1:15 p.m.•15 views

CVE-2025-39490

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Backpack Traveler allows PHP Local File Inclusion. This issue affects Backpack Traveler: from n/a through 2.7...

8.1CVSS5.8AI score0.00785EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/23 12:43 p.m.•5 views

CVE-2025-39490 WordPress Backpack Traveler <= 2.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Backpack Traveler allows PHP Local File Inclusion. This issue affects Backpack Traveler: from n/a through 2.7...

8.1CVSS8.3AI score0.00785EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/23 12:43 p.m.•63 views

CVE-2025-39490

CVE-2025-39490 affects Backpack Traveler (Mikado-Themes)

8.1CVSS7.2AI score0.00785EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/05/23 12:43 p.m.•29 views

CVE-2025-39490 WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects Backpack Traveler: from n/a through = 2.10.2...

8.1CVSS0.00785EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:26 a.m.•15 views

CVE-2024-4756

The WP Backpack WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.4CVSS5.6AI score0.00333EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/05/23 12:00 a.m.•15 views

WordPress plugin Backpack Traveler 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS7.7AI score0.00785EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/23 12:00 a.m.•3 views

CVE-2025-39490: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects Backpack Traveler: from n/a through = 2.10.2...

8.1CVSS7.5AI score0.00785EPSS
SaveExploits0References1
Rows per page
Query Builder