82 matches found
Branda WordPress plugin - Privilege Escalation
Branda WordPress plugin = 3.4.24 contains a privilege escalation caused by improper user identity validation in password update functionality, letting unauthenticated attackers change arbitrary user passwords, including administrators, exploit requires crafted request. id: CVE-2025-14998 info:...
2026-11551
2026-11551 CVE-2026-11551: Branda 插件 – 未认证权限提升（账户接管）...
By-Poloss..-..CVE-2026-11551-PoC
CVE-2026-11551：Branda 插件 - 未授权权限提升（账户接管） 概述 CVE ID ：CVE-2026-11551 CVSS 评分 ：9.8（严重） 受影响版本 ：Branda – White Label & Branding = 3.4.29 修复版本 ：3.4.31 发布时间 ：2026年6月19日 漏洞描述 WordPress 的 Branda 插件在 3.4.29 及之前的所有版本中存在通过账户接管实现权限提升的漏洞。原因在于该插件在更新用户密码前未能正确验证用户身份。这使得未经验证的攻击者能够更改任意用户（包括管理员）的密码，并借此访问其账户。 技术分析...
CVE-2026-11551-PoC
CVE-2026-11551 - 白标与品牌定制、免费登录页面定制器中的未认证权限提升 白标与品牌定制、免费登录页面定制器 update $wpdb-users, $data, ... ← 第2515行：双重哈希已存入 存在漏洞的代码（inc/modules/login-screen/signup-password.php:230-251） / BRANDA - signup-password.php Filter: wppreinsertuserdata / public function preinsertuserdata $data, // ❌ 未检查：if $update...
CVE-2025-14998
Wordpress Branda – 白标与品牌定制、免费登录页面自定义器 getrow $wpdb-prepare "SELECT FROM $wpdb-signups WHERE activationkey = '%s'", $key ; if ! empty $signup || $signup-active $meta = maybeunserialize $signup-meta ; if ! empty $meta'password' if 'yes' === $signuppassworduseencryption $password =...
CVE-2026-102376
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
CVE-2026-102376 WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
CVE-2026-102376 WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
EUVD-2026-90222
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
CVE-2026-102376
The WordPress Branda plugin is affected by a Cross Site Scripting (XSS) vulnerability in versions
WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Branda versions = 3.4.32...
CVE-2026-102376: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
WordPress Branda - White Label & Branding, Free Login Page Customizer plugin <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover vulnerability
WordPress Branda - White Label & Branding, Free Login Page Customizer plugin = 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by thevietronin - GalaxyOne in WordPress Plugin Branda versions = 3.4.29...
EUVD-2026-38097
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551: Weak Password Recovery Mechanism for Forgotten Password
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551 Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551 Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...