CVE-2023-51482 WordPress Eazy Plugin Manager plugin <= 4.1.2 - Auth. Arbitrary Options Update lead to RCE vulnerability

Improper Authentication vulnerability in EazyPlugins Eazy Plugin Manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Eazy Plugin Manager: from n/a through 4.1.2...

CVE-2023-51478

Improper Authentication vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19...

CVE-2023-51478

Improper Authentication vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19...

PT-2024-14141 · Unknown · Eazy Plugin Manager

Name of the Vulnerable Software and Affected Versions: Eazy Plugin Manager versions n/a through 4.1.2 Description: The issue is related to an Improper Authentication vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through...

WordPress plugin Login as User or Customer 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists in...

WordPress plugin和WordPress 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization...

PT-2024-14137 · Unknown · Abdul Hakeem Build App Online

Name of the Vulnerable Software and Affected Versions: Abdul Hakeem Build App Online versions 1.0.19 and earlier Description: The issue is related to an Improper Authentication vulnerability that allows Privilege Escalation in Abdul Hakeem Build App Online. Recommendations: For versions 1.0.19 an...

PT-2024-14143 · WordPress · Wp-Buy Login As User/Customer

Name of the Vulnerable Software and Affected Versions: wp-buy Login as User or Customer User Switching versions n/a through 3.8 Description: The issue is related to an Improper Authentication vulnerability that allows Privilege Escalation. This vulnerability can be exploited to escalate privilege...

CVE-2023-51405

Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a through 1.0.74...

CVE-2023-51405

Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a through 1.0.74...

CVE-2023-25790

Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...

CVE-2023-47504

Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4...

CVE-2023-47504

Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4...

CVE-2023-25790 WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection

Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...

PT-2024-14133 · WordPress · Checkout Mestres Wp

Name of the Vulnerable Software and Affected Versions: Checkout Mestres WP versions 7.1.9.7 and earlier Description: The issue is related to an Improper Authentication vulnerability that allows Privilege Escalation in the affected software. Recommendations: For versions 7.1.9.7 and earlier, updat...

PT-2024-14136 · Unknown · Buddyboss Theme

Name of the Vulnerable Software and Affected Versions: BuddyBoss Theme versions 2.4.60 and earlier Description: The issue is related to an Improper Authentication vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.4.60 and earlier...

PT-2024-12075 · Xtemos · Xtemos Woodmart

Name of the Vulnerable Software and Affected Versions: xtemos WoodMart versions n/a through 7.0.4 Description: The issue affects the xtemos WoodMart, allowing for Cross-Site Scripting XSS due to improper authentication and neutralization of input during web page generation. Recommendations: For...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Huawei HarmonyOS/EMUI Improper Authentication Vulnerability

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. An improper...

VulnCheck KEV: CVE-2023-5830

A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It is possible to initiate the attack...