Lucene search
+L

374 matches found

CVE
CVE
•added 2025/10/31 9:27 a.m.•40 views

CVE-2025-12041

The CVE-2025-12041 entry concerns the WordPress ERI File Library plugin up to version 1.1.0, where a missing capability check on the erifl_file AJAX action allows unauthenticated attackers to download files restricted to specific user roles. Affected software: WordPress ERI File Library plugin (v...

5.3CVSS5.8AI score0.00256EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/31 9:27 a.m.•23 views

EUVD-2025-37323

The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eriflfile' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to download files restricted to specific user...

5.3CVSS4.9AI score0.00256EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/31 9:27 a.m.•8 views

CVE-2025-12041 ERI File Library <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download

The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eriflfile' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to download files restricted to specific user...

5.3CVSS5.8AI score0.00256EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/10/31 3:28 a.m.•20 views

WordPress ERI File Library plugin <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download vulnerability

Missing Authorization to Unauthenticated Protected File Download vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin ERI File Library versions = 1.1.0...

5.3CVSS6.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•8 views

CVE-2025-12041: Missing Authorization

The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'eriflfile' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to download files restricted to specific user...

5.3CVSS5.8AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•29 views

PT-2025-44597

Name of the Vulnerable Software and Affected Versions ERI File Library plugin for WordPress versions up to and including 1.1.0 Description The ERI File Library plugin for WordPress has a flaw that allows unauthorized access to data. This is due to a missing capability check on the erifl file AJAX...

5.3CVSS5.6AI score0.00256EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•18 views

WordPress plugin ERI File Library security vulnerability

The WordPress ERI File Library plugin is a lightweight plugin designed for WordPress to create and publish document galleries, with support for inserting documents via the Gutenberg editor or shortcode. WordPress ERI File Library plugin suffers from an unauthorized data access vulnerability that...

5.3CVSS5.9AI score0.00256EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-15890

Malware in sbrugna...

5.5CVSS6.6AI score0.02986EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-15889

Malware in sbrugna...

5.5CVSS6.8AI score0.02883EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-15885

Malware in sbrugna...

5.5CVSS6.5AI score0.03091EPSS
SaveExploits1References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-15883

Malware in sbrugna...

5.5CVSS6.8AI score0.02846EPSS
SaveExploits0References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2018-5382

Malware in sbrugna...

6.5CVSS6.2AI score0.03113EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-15893

Malware in sbrugna...

5.5CVSS6.7AI score0.03024EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-15892

Malware in sbrugna...

5.5CVSS6.8AI score0.02951EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-15887

Malware in sbrugna...

5.5CVSS6.7AI score0.02813EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-15886

Malware in sbrugna...

5.5CVSS6.5AI score0.02994EPSS
SaveExploits0References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-15891

Malware in sbrugna...

5.5CVSS6.7AI score0.02846EPSS
SaveExploits0References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-15888

Malware in sbrugna...

5.5CVSS6.5AI score0.0261EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-15884

Malware in sbrugna...

5.5CVSS6.7AI score0.02979EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2016-10677

Malware in sbrugna...

5.5CVSS5.8AI score0.0133EPSS
SaveExploits0References8
Rows per page
Query Builder