Lucene search
+L

4 matches found

Kitploit
Kitploit
•added 2026/09/26 2:24 a.m.•11 views

CVE-2025-5288

🚨 REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - 認証欠如による未認証権限昇格 📋 説明 WordPress 用プラグイン REST API | Custom API Generator For Cross Platform And Import Export In WP は、バージョン 1.0.0 から 2.0.3 において、processhandler 関数のケイパビリティチェックが欠如しているため、権限昇格 Privilege Escalation...

9.8CVSS6AI score0.00631EPSS
SaveExploits1
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•17 views

WordPress plugin REST API | Custom API Generator For Cross Platform And Import Export In WP 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin REST API | Custom API Generator For Cross Platform And Impo...

9.8CVSS8.2AI score0.00631EPSS
SaveExploits1References4
Packet Storm News
Packet Storm News
•added 2025/06/13 12:00 a.m.•26 views

Custom API Generator for Cross Platform and Import Export in WP 2.0.3 Privilege Escalation

WordPress REST API | Custom API Generator For Cross Platform And Import Export In WP plugin versions 1.0.0 through 2.0.3 are susceptible to a privilege escalation vulnerability due to a missing capability check on the processhandler...

9.8CVSS8.6AI score0.00631EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•2 views

CVE-2025-5288: Missing Authorization

The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the processhandler function in versions 1.0.0 to 2.0.3. This makes it possible for unauthenticated attackers to POST an...

9.8CVSS5.9AI score0.00631EPSS
SaveExploits1References1
Rows per page
Query Builder