50 matches found
WordPress WP Posts Password Batch Manager plugin <= 1.1 - Unauthenticated Bulk Post Password Rewrite vulnerability
Unauthenticated Bulk Post Password Rewrite vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Posts Password Batch Manager versions = 1.1...
CVE-2026-89283
The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...
CVE-2026-89283 WP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password Rewrite
The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...
CVE-2026-89283
The WP Posts Password Batch Manager WordPress plugin, in versions through 1.1 , contains a vulnerability where it fails to perform capability or nonce checks on a bulk post-password action. This action runs on an always-loaded admin handler , enabling unauthenticated attackers to reset or overwri...
CVE-2026-89283 WP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password Rewrite
The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...
EUVD-2026-96785
The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...
CVE-2026-89283: Missing Authorization
The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin handler, allowing unauthenticated attackers to reset or overwrite the password of every published post, disclosing...
PT-2026-110058
Name of the Vulnerable Software and Affected Versions WP Posts Password Batch Manager versions prior to 1.2 Description The plugin fails to perform capability or nonce checks on a bulk post-password action executed via an always-loaded admin handler. This allows unauthenticated attackers to reset...
CVE-2026-42323 Piwigo: SQL Injection in Batch Manager
Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/batchmanager.php accepts administrator-controlled dimension width, height, and ratio values and filesize values from the Batch Manager filter URL without numeric validation. The URL filter parser...
CVE-2026-42323 Piwigo: SQL Injection in Batch Manager
Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/batchmanager.php accepts administrator-controlled dimension width, height, and ratio values and filesize values from the Batch Manager filter URL without numeric validation. The URL filter parser...
EUVD-2017-8975
Malware in sbrugna...
EUVD-2020-11124
Malware in sbrugna...
EUVD-2017-8976
Malware in sbrugna...
EUVD-2021-27850
Malicious code in bioql PyPI...
CVE-2021-40678
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...
CVE-2021-40678
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...
CVE-2021-40678
CVE-2021-40678 concerns Piwigo 11.5.0, where a persistent cross-site scripting (XSS) vulnerability exists in the single mode function via the URL path /admin.php?page=batch_manager&mode=unit. The connected documents consistently describe it as a client-side JavaScript execution risk reachable thr...
PT-2022-11298
Name of the Vulnerable Software and Affected Versions Piwigo version 11.5.0 Description The issue is related to a persistent cross-site scripting in the single mode function. This occurs through the /admin.php?page=batch manager&mode=unit API endpoint, specifically affecting the mode parameter...
