PT-2024-27375 · Unknown · Theme4Press Demo Awesome

Name of the Vulnerable Software and Affected Versions: Theme4Press Demo Awesome versions 1.0.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Theme4Press De...

WordPress plugin Demo Awesome 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-50481

Incorrect Privilege Assignment vulnerability in stackthemes Bstone Demo Importer bstone-demo-importer allows Privilege Escalation.This issue affects Bstone Demo Importer: from n/a through = 1.0.1...

CVE-2024-50481 WordPress Bstone Demo Importer plugin <= 1.0.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in stackthemes Bstone Demo Importer bstone-demo-importer allows Privilege Escalation.This issue affects Bstone Demo Importer: from n/a through = 1.0.1...

CVE-2024-50481

CVE-2024-50481 describes an Incorrect Privilege Assignment in the WordPress plugin Bstone Demo Importer (versions up to 1.0.1) that enables Privilege Escalation . Public sources consistently identify the affected component as the Bstone Demo Importer plugin and indicate the vulnerability affects ...

CVE-2024-50481 WordPress Bstone Demo Importer plugin <= 1.0.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in stackthemes Bstone Demo Importer bstone-demo-importer allows Privilege Escalation.This issue affects Bstone Demo Importer: from n/a through = 1.0.1...

PT-2024-34258 · Unknown · Bstone Demo Importer

Name of the Vulnerable Software and Affected Versions: Bstone Demo Importer versions 1.0.1 and earlier Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows for Privilege Escalation. Recommendations: For Bstone Demo Importer versions 1.0.1 and earlier,...

WordPress plugin Bstone Demo Importer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

UP-RESULT PRO 1.0 SQL Injection

Titles: UP-RESULTpro-1.0 Multiple-SQLi Author: nu11secur1ty Date: 10/28/2024 Vendor: https://mayurik.com/ Software: https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download Reference:...

WordPress Bstone Demo Importer plugin <= 1.0.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Bstone Demo Importer versions = 1.0.1...

WordPress Bstone Demo Importer Plugin <= 1.0.1 is vulnerable to Privilege Escalation

Software Bstone Demo Importer Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Privilege Escalation CVE CVE-2024-50481 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 598203db6a42 Credits stealthcopter Required privileg...

Exploit for Command Injection in Netgate Pfsense

pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This...

Remote Code Execution (RCE)

angular-base64-upload is vulnerable to Remote Code Execution RCE. The vulnerability is due to a lack of proper access controls in demo/server.php, allowing attackers to upload arbitrary content, which can then be executed from demo/uploads...

Malicious code in sec-dep-demo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9830 Malicious code in sec-dep-demo (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2020-36837

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the resetwizardactions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there ...

CVE-2020-36837 ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the resetwizardactions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there ...

CVE-2020-36837 ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the resetwizardactions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there ...

CVE-2020-36837

The ThemeGrill Demo Importer plugin for WordPress has a vulnerability (CVE-2020-36837) in versions 1.3.4–1.6.1 where a missing capability check in the reset_wizard_actions function allows authentication bypass. If an attacker is authenticated, they can reset the WordPress database, and if there i...

WordPress plugin ThemeGrill Demo Importer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...