Improper Privilege Management

Moodle is vulnerable to Improper Privilege Management. The vulnerability is due to insufficient capability checks, allowing users with access to restore glossaries in courses to restore them into the global site glossary without proper permissions...

Authorization Bypass

moodle/moodle is vulnerable to Authorization Bypass. The vulnerability is due to insufficient capability checks, which allowed users to delete badges they did not have permission to access...

CVE-2024-8672

CVE-2024-8672 affects the WordPress plugin “Widget Options – The #1 WordPress Widget & Block Control Plugin” (versions

GHSA-J822-X5GG-5R56 Moodle allows users to retrieve information they did not have permission to access

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access...

CVE-2024-10520

The WP Project Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'check' method of the 'CreateMilestone', 'CreateTaskList', 'CreateTask', and 'DeleteTask' classes in version 2.6.14. This makes it possible for unauthenticated...

CVE-2024-45689

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access...

UBUNTU-CVE-2024-45689

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access...

CVE-2024-45689

CVE-2024-45689 describes an access-control flaw in Moodle where dynamic tables did not enforce capability checks, allowing users to retrieve information they should not access. Multiple connected sources (OSV/GHSA entries, Nessus/NASL references) corroborate the impact as unprotected access to se...

CVE-2024-45689 Moodle: unprotected access to sensitive information via dynamic tables

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access...

PT-2024-16441 · WordPress · Yaad Sarig Payment Gateway For Wc

Name of the Vulnerable Software and Affected Versions: Yaad Sarig Payment Gateway For WC plugin for WordPress versions up to, and including, 2.2.4 Description: The issue is related to a missing capability check on the yaadpay view log callback and yaadpay delete log callback functions. This allow...

PT-2024-16747 · WordPress · Wp Log Viewer

Name of the Vulnerable Software and Affected Versions: WP Log Viewer plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to unauthorized use of functionality due to a missing capability check on several AJAX actions. This allows authenticated attackers with...

Moodle has insufficient capability checks

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

GHSA-4GQ2-X5W4-7HP8 Moodle has insufficient capability checks

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

CVE-2024-43435

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

UBUNTU-CVE-2024-43435

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

Improper Privilege Management

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Privilege Management due to insufficient capability checks in the process of restoring glossaries which allows an attacker to restore glossaries in courses into the global site glossary...

CVE-2024-43435

CVE-2024-43435 describes a Moodle vulnerability where, due to insufficient capability checks, users who can restore glossaries in courses can inadvertently restore them into the global site glossary. The issue centers on authorization logic for glossary restoration, enabling an unintended elevati...

CVE-2024-43435 Moodle: can create global glossary without being admin

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

CVE-2024-43435 Moodle: can create global glossary without being admin

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

CVE-2024-43435 Moodle: can create global glossary without being admin

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...