Lucene search
K

115 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 1:31 a.m.9 views

CVE-2026-27387

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.26...

5.4CVSS5.9AI score0.00233EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.6 views

CVE-2026-23548

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.25...

5.3CVSS5.9AI score0.00228EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:18 p.m.9 views

CVE-2026-27387

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.26...

5.4CVSS0.00233EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:35 p.m.2 views

CVE-2026-27387 WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.26...

5.4CVSS5.1AI score0.00233EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:35 p.m.24 views

CVE-2026-27387 WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.26...

5.4CVSS0.00233EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:35 p.m.3 views

CVE-2026-27387

Missing Authorization vulnerability in designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.26...

5.5AI score0.00233EPSS
Exploits0References2
CVE
CVE
added 2026/02/19 8:35 p.m.10 views

CVE-2026-27387

CVE-2026-27387 affects the WordPress DirectoryPress plugin (versions up to and including 3.6.26). The issue is a Missing Authorization/Broken Access Control vulnerability due to incorrectly configured access control security levels in DirectoryPress directorypress, allowing improper access within...

5.4CVSS5.9AI score0.00233EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.4 views

CVE-2026-23548

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.25...

5.3CVSS0.00228EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.3 views

CVE-2026-23548

Missing Authorization vulnerability in designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.25...

5.5AI score0.00228EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/19 8:26 a.m.31 views

CVE-2026-23548 WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.25...

5.3CVSS0.00228EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:26 a.m.3 views

CVE-2026-23548 WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.25...

5.3CVSS5.9AI score0.00228EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:26 a.m.9 views

CVE-2026-23548

CVE-2026-23548 is a broken access control vulnerability in the WordPress DirectoryPress plugin up to version 3.6.25. The root cause is missing authorization caused by incorrectly configured access control security levels in DirectoryPress directorypress, potentially enabling unauthorized access f...

5.3CVSS5.9AI score0.00228EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.8 views

PT-2026-20935

Missing Authorization vulnerability in designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.26...

5.5AI score0.00233EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.9 views

WordPress plugin DirectoryPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

5.4CVSS5.8AI score0.00233EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.8 views

WordPress plugin DirectoryPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

5.3CVSS5.8AI score0.00228EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.6 views

PT-2026-20665

Missing Authorization vulnerability in designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.25...

5.5AI score0.00228EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/18 7:29 a.m.4 views

WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin DirectoryPress versions = 3.6.26...

5.4CVSS5.4AI score0.00233EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/18 6:55 a.m.5 views

WordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin DirectoryPress versions = 3.6.25...

5.4AI score0.00228EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/28 2:38 a.m.9 views

CVE-2025-62967

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through = 3.6.25...

6.5CVSS5.9AI score0.00151EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/27 3:30 a.m.5 views

EUVD-2025-35978

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through = 3.6.25...

6.5CVSS5.9AI score0.00151EPSS
Exploits0References2
Rows per page
Query Builder