Lucene search
K

74 matches found

Patchstack
Patchstack
added 2026/03/23 6:17 p.m.3 views

WordPress Build App Online plugin <= 1.0.23 - Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action vulnerability

Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action vulnerability discovered by WordFence in WordPress Plugin Build App Online versions = 1.0.23...

5.3CVSS5.8AI score0.00305EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/03/21 4:17 a.m.4 views

CVE-2026-3651

The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23. This is due to the plugin registering the 'build-app-online-update-vendor-product' AJAX action via wpajaxnopriv without proper authentication checks, capability verificatio...

5.3CVSS0.00305EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/03/21 3:26 a.m.1 views

CVE-2026-3651 Build App Online <= 1.0.23 - Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action

The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23. This is due to the plugin registering the 'build-app-online-update-vendor-product' AJAX action via wpajaxnopriv without proper authentication checks, capability verificatio...

5.3CVSS5.9AI score0.00305EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/03/21 3:26 a.m.5 views

CVE-2026-3651

The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23. This is due to the plugin registering the 'build-app-online-update-vendor-product' AJAX action via wpajaxnopriv without proper authentication checks, capability verificatio...

5.3CVSS5.9AI score0.00305EPSS
Exploits0References8
CVE
CVE
added 2026/03/21 3:26 a.m.11 views

CVE-2026-3651

The CVE affects the Build App Online WordPress plugin (

5.3CVSS5.9AI score0.00305EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/03/21 3:26 a.m.29 views

CVE-2026-3651 Build App Online <= 1.0.23 - Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action

The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23. This is due to the plugin registering the 'build-app-online-update-vendor-product' AJAX action via wpajaxnopriv without proper authentication checks, capability verificatio...

5.3CVSS0.00305EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.5 views

PT-2026-26865

The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23. This is due to the plugin registering the 'build-app-online-update-vendor-product' AJAX action via wp ajax nopriv without proper authentication checks, capability...

5.3CVSS5.9AI score0.00305EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.6 views

WordPress plugin Build App Online 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.9AI score0.00305EPSS
Exploits0References7
Patchstack
Patchstack
added 2026/02/17 6:37 a.m.10 views

WordPress Build App Online plugin <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism vulnerability

Account Takeover via Weak Password Reset Mechanism vulnerability discovered by Ram - Wordfence in WordPress Plugin Build App Online versions = 1.0.22...

9.8CVSS5.5AI score0.00621EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-56191

Malicious code in bioql PyPI...

9.8CVSS9AI score0.00697EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-42649

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01037EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-10774

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00669EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2024-52083

Malicious code in bioql PyPI...

8.8CVSS8.9AI score0.00174EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-24895

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00155EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-56192

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00476EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-59656

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00621EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-43773

Malicious code in bioql PyPI...

9.8CVSS8.7AI score0.00564EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/20 12:0 a.m.4 views

WordPress Plugin Build App Online Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Build App Online 1.0.23 and prior...

6.5CVSS6.8AI score0.00155EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 7:23 p.m.11 views

CVE-2025-53249

Cross-Site Request Forgery CSRF vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through = 1.0.23...

6.5CVSS5.9AI score0.00155EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 7:15 p.m.8 views

CVE-2025-53249

Cross-Site Request Forgery CSRF vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through = 1.0.23...

6.5CVSS0.00155EPSS
Exploits0References1
Rows per page
Query Builder