Lucene search
K

7 matches found

Vulnrichment
Vulnrichment
added 2026/04/07 11:25 p.m.1 views

CVE-2026-2263 Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hustlemoduleconverted' AJAX action in all versions up to, and including, 7.8.10.2. This makes it possible for...

5.3CVSS5.9AI score0.00073EPSS
Exploits0References5
CVE
CVE
added 2026/04/07 11:25 p.m.7 views

CVE-2026-2263

Vulnerability: Hustle – Email Marketing, Lead Generation, Optins, Popups for WordPress suffers missing capability check on the AJAX action hustle_module_converted, allowing unauthenticated modification of conversion-tracking data in all versions up to 7.8.10.2. Impact: attackers can forge convers...

5.3CVSS5.9AI score0.00073EPSS
Exploits0References5
Patchstack
Patchstack
added 2026/04/07 10:47 p.m.4 views

WordPress Hustle - Email Marketing, Lead Generation, Optins, Popups plugin <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation vulnerability

WordPress Hustle - Email Marketing, Lead Generation, Optins, Popups plugin = 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation vulnerability discovered by Nguyen C in WordPress Plugin Hustle versions = 7.8.10.2...

5.3CVSS5.9AI score0.00073EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/03/13 4:15 p.m.1 views

CVE-2024-0828

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers...

6.3CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2024/03/13 3:26 p.m.14 views

CVE-2024-0828 Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers...

5.4CVSS5.4AI score0.00108EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/13 3:26 p.m.11 views

CVE-2024-0828 Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization

The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers...

5.4CVSS6.6AI score0.00108EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2024/02/22 12:0 a.m.16 views

Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization

Description The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticat...

6.3CVSS6.7AI score0.00108EPSS
Exploits0References1
Rows per page
Query Builder