WordPress Riaxe Product Customizer plugin <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action vulnerability

Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action vulnerability discovered by Kai Aizen in WordPress Plugin Riaxe Product Customizer versions = 2.1.2...

CVE-2026-3596 Riaxe Product Customizer <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action

The Riaxe Product Customizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.2. The plugin registers an unauthenticated AJAX action 'wpajaxnoprivinstall-imprint' that maps to the inkpdaddoption function. This function reads 'option' and...

CVE-2026-3596

The CVE-2026-3596 entry documents a privilege escalation in the WordPress plugin Riaxe Product Customizer up to version 2.1.2 . An unauthenticated AJAX action (wp_ajax_nopriv_install-imprint ) maps to the function ink_pd_add_option() , which reads option and opt_value from POST data and performs ...

EUVD-2005-4015

Malware in sbrugna...

EUVD-2021-34112

Malicious code in bioql PyPI...

Evaluating the Effectiveness of Reward Modeling of Generative AI Systems

New research evaluating the effectiveness of reward modeling during Reinforcement Learning from Human Feedback RLHF: "SEAL: Systematic Error Analysis for Value ALignment." The paper introduces quantitative metrics for evaluating the effectiveness of modeling and aligning human values: Abstract:...

CVE-2021-4270

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the...

CVE-2021-4270

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the...

Cross site scripting

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the...

PT-2022-11665 · Unknown · Imprint Cms

Name of the Vulnerable Software and Affected Versions: Imprint CMS affected versions not specified Description: A vulnerability was found in Imprint CMS, classified as problematic. The issue affects the SearchForm function of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the quer...

CVE-2021-4270 Imprint CMS ViewHelpers.cs SearchForm cross site scripting

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the...

CVE-2021-4270 Imprint CMS ViewHelpers.cs SearchForm cross site scripting

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the...

CVE-2021-4270

The CVE-2021-4270 issue affects Imprint CMS, specifically the SearchForm in ImprintCMS/Models/ViewHelpers.cs. The vulnerability arises from improper handling of the query argument, enabling cross-site scripting with remote attack potential. A patch is available (name: 6140b140ccd02b5e4e7d6ba013ac...

Imprint CMS 跨站脚本漏洞

Imprint CMS is a publisher-oriented, domain-specific CMS based on ASP.net MVC 4 and LinqToSQL by Peder Skou, an individual developer. A security vulnerability exists in Imprint CMS, which originates in the SearchForm function of the file ImprintCMS/Models/ViewHelpers.cs, where the operation of a...

heidelpay.com XSS vulnerability

Open Bug Bounty ID: OBB-595980 Description| Value ---|--- Affected Website:| heidelpay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

imprint-solutions.com XSS vulnerability

Open Bug Bounty ID: OBB-556264 Description| Value ---|--- Affected Website:| imprint-solutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2005-4020

SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the productid parameter...

CVE-2005-4020

SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the productid parameter...

CVE-2005-4020

The CVE-2005-4020 issue affects Widget Imprint, version 1.0.26 and earlier, where create.php is vulnerable to SQL injection via the product_id parameter. This allows remote attackers to execute arbitrary SQL commands. The available sources confirm the vulnerability and affected version, but there...

Widget Imprint SQL inj. vuln.

Widget Imprint SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html Vendor:http://www.widgetpress.com/products?product=wimprint affected version: 1.0.26 and prior Product Description: Database driven web...