CVE-2025-5815-Nuclei-Template

📄 CVE-2025-5815 用 Nuclei テンプレート 🚀 概要 このリポジトリは、WordPress プラグイン Traffic Monitor における 認証なしボットログ記録無効化の脆弱性 CVE-2025-5815 を検出するために特別に設計された Nuclei テンプレートを提供します。この問題により、認証されていない攻撃者が脆弱な AJAX アクションを介してリモートでボットログ記録を無効化できます。 🔍 脆弱性の説明 CVE-2025-5815 は、WordPress 用 Traffic Monitor プラグイン の tfcmsetbotflags AJAX...

EUVD-2025-18243

Malicious code in bioql PyPI...

CVE-2025-5815

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

CVE-2025-5815 Traffic Monitor <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

CVE-2025-5815 Traffic Monitor <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

CVE-2025-5815

The Traffic Monitor plugin for WordPress (up to version 3.2.2) is vulnerable due to a missing capability check in the tfcm_maybe_set_bot_flags()/tfcm_set_bot_flags AJAX path, allowing unauthenticated attackers to disable bot logging. This is an unauthenticated remote modification risk affecting t...

WordPress Traffic Monitor 3.2.2 Unauthenticated Bot Logging Disable

This repository features a Nuclei template specifically designed to detect an unauthenticated bot logging disable vulnerability in the Traffic Monitor WordPress plugin. This issue allows unauthenticated attackers to remotely disable bot logging via a vulnerable AJAX action. It affects versions up...

WordPress plugin Traffic Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...