Lucene search
+L

680 matches found

Cvelist
Cvelist
added 2024/04/19 11:57 a.m.26 views

CVE-2024-32683 WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5...

5.3CVSS5.6AI score0.00464EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/18 12:0 a.m.8 views

WordPress Plugin EAN for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exis...

4.3CVSS6.7AI score0.00375EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/04/17 2:15 p.m.10 views

WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Kyle Sanchez Patchstack Alliance in WordPress Plugin Wp Ultimate Review versions = 2.2.5...

7.5CVSS7AI score0.00464EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/17 12:0 a.m.21 views

WordPress Wp Ultimate Review Plugin <= 2.2.5 is vulnerable to Insecure Direct Object References (IDOR)

Software Wp Ultimate Review Type Plugin Vulnerable versions = 2.2.5 Fixed in 2.3.0 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-32683 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7b452df5fd16 Credits Kyle...

7.5CVSS6.5AI score0.00464EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/17 12:0 a.m.23 views

WordPress Filebird Plugin <= 5.6.3 is vulnerable to Insecure Direct Object References (IDOR)

Software Filebird Type Plugin Vulnerable versions = 5.6.3 Fixed in 5.6.4 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-2346 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 800a2ac6f56e Credits Tim Coen Required...

5.4CVSS6.5AI score0.00308EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/16 12:0 a.m.19 views

WordPress WP-Recall Plugin <= 16.26.5 is vulnerable to Insecure Direct Object References (IDOR)

Software WP-Recall Type Plugin Vulnerable versions = 16.26.5 Fixed in 16.26.6 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-32604 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3904a35f5abe Credits Kyle Sanchez...

4.3CVSS6.5AI score0.00357EPSS
SaveExploits0References2Affected Software1
Tibco
Tibco
added 2024/04/09 7:42 p.m.16 views

TIBCO Security Advisory: April 9, 2024 - TIBCO JasperReports Server - CVE-2024-3324

TIBCO JasperReports Server Insecure Direct Object References IDOR Vulnerability Original release date: April 9, 2023 Last revised: --- CVE-2024-3324 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.4 and below TIBCO JasperReports Server versions 8.2.0 and belo...

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2024/04/07 6:7 p.m.29 views

CVE-2024-31296 WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.81...

4.3CVSS5AI score0.00318EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/05 10:32 a.m.8 views

WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin BookingPress versions = 1.0.81...

5.4CVSS7AI score0.00318EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.15 views

WordPress LearnPress Plugin <= 4.2.6.3 is vulnerable to Insecure Direct Object References (IDOR)

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.3 Fixed in 4.2.6.4 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-1289 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 88d0a0c7ed9f Credits drop Required...

6.5CVSS6.5AI score0.00391EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.17 views

WordPress ProfileGrid Plugin <= 5.7.6 is vulnerable to Insecure Direct Object References (IDOR)

Software ProfileGrid Type Plugin Vulnerable versions = 5.7.6 Fixed in 5.7.7 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-31291 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1fdaca4c89b3 Credits Kyle Sanchez...

7.1CVSS6.5AI score0.00379EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.16 views

WordPress BookingPress Plugin <= 1.0.81 is vulnerable to Insecure Direct Object References (IDOR)

Software BookingPress Type Plugin Vulnerable versions = 1.0.81 Fixed in 1.0.82 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-31296 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1ca5ae451b3c Credits Steven Julian...

5.4CVSS6.5AI score0.00318EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/03/31 6:24 p.m.35 views

CVE-2024-30543 WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a through 1.1.18...

6.5CVSS6.7AI score0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/31 6:21 p.m.24 views

CVE-2024-31095 WordPress Thumbs Rating plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability

A vulnerability in Ricard Torres Thumbs Rating thumbs-rating.This issue affects Thumbs Rating: from n/a through = 5.1.0...

5.3CVSS8.5AI score0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/29 3:50 p.m.15 views

CVE-2024-30513 WordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2...

6.5CVSS6.9AI score0.00455EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/29 3:50 p.m.19 views

CVE-2024-30513 WordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2...

6.5CVSS6.7AI score0.00455EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/29 2:15 p.m.18 views

CVE-2024-30507 WordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Molongui.This issue affects Molongui: from n/a through 4.7.7...

2.7CVSS6.9AI score0.00436EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.19 views

WordPress Whizzy Plugin <= 1.1.18 is vulnerable to Insecure Direct Object References (IDOR)

Software Whizzy Type Plugin Vulnerable versions = 1.1.18 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-30543 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 58661e758181 Credits Steven Julian Required...

6.5CVSS6.5AI score0.0036EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.18 views

WordPress Thumbs Rating Plugin <= 5.1.0 is vulnerable to Insecure Direct Object References (IDOR)

Software Thumbs Rating Type Plugin Vulnerable versions = 5.1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-31095 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1ec97b886ff5 Credits Kyle Sanchez...

9.1CVSS6.5AI score0.00436EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.21 views

WordPress Molongui Plugin <= 4.7.7 is vulnerable to Insecure Direct Object References (IDOR)

Software Molongui Type Plugin Vulnerable versions = 4.7.7 Fixed in 4.7.8 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-30507 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID c7f745bc9de4 Credits CatFather Required...

2.7CVSS6.5AI score0.00436EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder