10073 matches found
CVE-2025-14720
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on multiple AJAX actions in all versions up to, and including, 1.2.38. This makes it possible for unauthenticated attackers to mark payments as...
CVE-2025-13717
The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wpgvccfcheckdownloadrequest' function in all versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to export sensitive...
CVE-2025-13934
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course enrollment in all versions up to, and including, 3.9.3. This is due to a missing capability check and purchasability validation in the courseenrollment AJAX handler. This makes it possib...
CVE-2025-14657
The Eventin – Event Manager, Events Calendar, Event Tickets and Registrations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'postsettings' function in all versions up to, and including, 4.0.51. This makes it possible for...
CVE-2026-21221
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-21221
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20851
Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...
CVE-2026-20851
Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...
CVE-2026-20835
Out-of-bounds read in Capability Access Management Service camsvc allows an authorized attacker to disclose information locally...
CVE-2026-20835
Out-of-bounds read in Capability Access Management Service camsvc allows an authorized attacker to disclose information locally...
CVE-2026-20830
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20830
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20815
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20815
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-21221
CVE-2026-21221 maps to a race-condition in the Capability Access Management Service (camsvc) that allows a locally authenticated attacker to obtain elevated privileges. The root cause is concurrent execution with improper synchronization on a shared resource. The vulnerability is associated with ...
CVE-2026-20830
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20830 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-20830
CVE-2026-20830 describes a race condition in the Capability Access Management Service (camsvc) that allows an authorized local attacker to elevate privileges. The issue is tied to concurrent execution on a shared resource and improper synchronization. Public exploit activity is noted in linked ad...
EUVD-2026-2109
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...