Lucene search
+L

288 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•2 views

CVE-2023-25037: Missing Authorization

Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar Contact Form: from n/a through 1.2.34...

4.3CVSS7.9AI score0.00556EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•5 views

CVE-2023-23814: Missing Authorization

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through 1.4.13...

3.8CVSS5.9AI score0.0047EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•14 views

PT-2024-12011 · Codepeople · Codepeople Wp Time Slots Booking Form

Name of the Vulnerable Software and Affected Versions: CodePeople WP Time Slots Booking Form versions 1.1.82 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

7.2CVSS6.9AI score0.00711EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•13 views

PT-2024-12042 · Codepeople · Codepeople Booking Calendar Contact Form

Name of the Vulnerable Software and Affected Versions: CodePeople Booking Calendar Contact Form versions 1.2.34 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: F...

4.3CVSS8.6AI score0.00556EPSS
SaveExploits0References3
NVD
NVD
•added 2024/10/06 12:15 p.m.•33 views

CVE-2024-47297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

7.1CVSS0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/06 11:46 a.m.•47 views

CVE-2024-47297 WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

7.1CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/06 11:46 a.m.•18 views

CVE-2024-47297 WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/06 11:46 a.m.•61 views

CVE-2024-47297

CVE-2024-47297 : WordPress CP Polls plugin versions up to 1.0.74 are vulnerable to a reflected XSS due to improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH). Patch information from Patchstack indicates the vulnerability is fixed in CP Polls 1.0.75. Af...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/18 7:44 a.m.•56 views

BIT-WORDPRESS-2023-28492

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10...

4.3CVSS4.5AI score0.00311EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/18 7:43 a.m.•14 views

BIT-WORDPRESS-MULTISITE-2023-28492

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10...

4.3CVSS4.5AI score0.00311EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/10 8:15 a.m.•12 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/10 8:15 a.m.•41 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/10 7:43 a.m.•28 views

CVE-2024-35735 WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

5.3CVSS7AI score0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/10 7:43 a.m.•40 views

CVE-2024-35735 WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

5.3CVSS0.00402EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/10 7:43 a.m.•71 views

CVE-2024-35735

CVE-2024-35735 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin for WordPress, affecting versions up to 1.2.11 (listed as affected from n/a through 1.2.11). The Red Hat vulnerability entry mirrors these details. The connected documents do not provide a ...

9.8CVSS7.3AI score0.00402EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•2 views

CVE-2024-35735: Missing Authorization

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/09 12:15 p.m.•44 views

CVE-2024-33543

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

7.5CVSS0.00417EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/09 12:15 p.m.•11 views

CVE-2024-33543

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

7.5CVSS5.8AI score0.00417EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/09 12:11 p.m.•23 views

CVE-2024-33543 WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

7.5CVSS6.9AI score0.00417EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/09 12:11 p.m.•82 views

CVE-2024-33543

CVE-2024-33543 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin, affecting WordPress WP Time Slots Booking Form versions up to 1.2.06 (vendor: CodePeople). The issue enables unauthorized access due to broken access control as described in the CVE entry....

7.5CVSS7.5AI score0.00417EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder