Lucene search
K

114 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 11:58 a.m.6 views

CVE-2025-22773

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...

5.3CVSS7.2AI score0.00383EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:40 a.m.5 views

CVE-2024-49256

Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through = 1.0.18...

8.8CVSS5.9AI score0.00244EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:4 p.m.3 views

CVE-2020-10114

cPanel before 84.0.20 allows stored self-XSS via the HTML file editor SEC-535...

6.1CVSS6.6AI score0.00421EPSS
Exploits0
NVD
NVD
added 2025/01/15 4:15 p.m.9 views

CVE-2025-22773

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...

5.3CVSS0.00383EPSS
Exploits0References1
CVE
CVE
added 2025/01/15 3:23 p.m.62 views

CVE-2025-22773

CVE-2025-22773 pertains to the WPChill Htaccess File Editor and describes an Insertion of Sensitive Information into an Externally-Accessible File or Directory vulnerability caused by incorrectly configured access controls. The issue affects Htaccess File Editor from version n/a up to 1.0.19. The...

5.3CVSS7.2AI score0.00383EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/15 3:23 p.m.17 views

CVE-2025-22773 WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...

5.3CVSS0.00383EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/15 3:23 p.m.6 views

CVE-2025-22773 WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...

5.3CVSS8.5AI score0.00383EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/15 12:0 a.m.2 views

PT-2025-4690 · Unknown · Htaccess File Editor

Name of the Vulnerable Software and Affected Versions: Htaccess File Editor versions 1.0.19 and earlier Description: The issue allows for the insertion of sensitive information into externally-accessible files or directories, exploiting incorrectly configured access control security levels...

5.3CVSS9.4AI score0.00383EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/15 12:0 a.m.1 views

WordPress plugin Htaccess File Editor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.1AI score0.00383EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/14 5:49 a.m.2 views

WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Htaccess File Editor versions = 1.0.19...

5.3CVSS7AI score0.00383EPSS
Exploits0Affected Software1
NVD
NVD
added 2024/11/01 3:15 p.m.19 views

CVE-2024-49256

Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through = 1.0.18...

8.8CVSS0.00244EPSS
Exploits0References1
OSV
OSV
added 2024/11/01 3:15 p.m.1 views

CVE-2024-49256

Incorrect Authorization vulnerability in WPChill Htaccess File Editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through 1.0.18...

8.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.56 views

CVE-2024-49256

CVE-2024-49256 - WordPress Htaccess File Editor Vulnerability type: Broken access control (Incorrect Authorization). Affected software: WPChill Htaccess File Editor (WordPress plugin) versions up to and including 1.0.18. Root cause: Authorization checks fail to properly constrain access to editor...

8.8CVSS5.9AI score0.00244EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/01 2:18 p.m.21 views

CVE-2024-49256 WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability

Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through = 1.0.18...

5.4CVSS0.00244EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.12 views

CVE-2024-49256 WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability

Incorrect Authorization vulnerability in WPChill Htaccess File Editor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Htaccess File Editor: from n/a through 1.0.18...

5.4CVSS7AI score0.00244EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.2 views

PT-2024-33394 · Wpchill · Wpchill Htaccess File Editor

Name of the Vulnerable Software and Affected Versions: WPChill Htaccess File Editor versions 1.0.18 and earlier Description: The issue is related to an Incorrect Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means tha...

8.8CVSS6.9AI score0.00244EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.2 views

WordPress plugin Htaccess File Editor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.6AI score0.00244EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/10/14 12:27 p.m.2 views

WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Htaccess File Editor versions = 1.0.18...

8.8CVSS7AI score0.00244EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/10/14 12:0 a.m.18 views

WordPress Htaccess File Editor Plugin <= 1.0.18 is vulnerable to Broken Access Control

Software Htaccess File Editor Type Plugin Vulnerable versions = 1.0.18 Fixed in 1.0.19 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-49256 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d6dd94150ebc Credits savphill Require...

8.8CVSS6.8AI score0.00244EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/08/21 3:11 p.m.16 views

GO-2022-0556 OS Command Injection in file editor in Gogs in gogs.io/gogs

OS Command Injection in file editor in Gogs in gogs.io/gogs...

10CVSS9.7AI score0.09234EPSS
Exploits1References5
Rows per page
Query Builder