CVE-2023-41954 WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability

Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress: from n/a through 4.13.1...

CVE-2023-41665 WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability

Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0...

CVE-2023-37999

HT Mega (Absolute Addons for Elementor) for WordPress

CVE-2023-37389

CVE-2023-37389 relates to SAASPROJECT Booking Package Plugin for WordPress, where versions 1.5.98 and earlier suffer an unauthenticated privilege escalation due to improper privilege management. The Patchstack entry confirms the vulnerable component and the root cause as Privilege Escalation with...

CVE-2023-26009 WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation

Improper Privilege Management vulnerability in Favethemes Houzez Login Register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through 2.6.3...

CVE-2023-23990

CVE-2023-23990 : WordPress plugin “Redirection for Contact Form 7” (wpcf7-redirect) has an improper Privilege Management vulnerability that enables Privilege Escalation. Affected versions are

PT-2024-13525 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum versions 2.2.3 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in wpForo Forum. Recommendations: For versions 2.2.3 and earlier, update to a version later than 2.2.3 t...

PT-2024-12607 · Unknown · Saasproject Booking Package

Name of the Vulnerable Software and Affected Versions: SAASPROJECT Booking Package versions 1.5.98 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in the SAASPROJECT Booking Package. Recommendations: For versions 1.5.98 and earlier...

PT-2024-13020 · Unknown · Profilepress

Name of the Vulnerable Software and Affected Versions: ProfilePress versions through 4.13.1 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in ProfilePress Membership Team ProfilePress. Recommendations: For versions through 4.13.1, update to a...

WordPress plugin WebinarIgnition 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin WholesaleX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-20638

Name of the Vulnerable Software and Affected Versions Masteriyo LMS versions 1.7.2 and earlier Description The issue is related to Improper Privilege Management, allowing Privilege Escalation in Masteriyo LMS. Recommendations For Masteriyo LMS versions 1.7.2 and earlier, update to a version later...

PT-2024-13580 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon Booking System versions n/a through 8.6 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the Salon Booking System. Recommendations: For versions n/a through 8.6, update to a version th...

WordPress plugin Login with phone number 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-24629 · Woocommerce · Simple Registration For Woocommerce

Name of the Vulnerable Software and Affected Versions: Simple Registration for WooCommerce versions 1.5.6 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation. Recommendations: For versions 1.5.6 and earlier, update to a version that...

WordPress plugin ARMember 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-12675

Name of the Vulnerable Software and Affected Versions HasThemes HT Mega versions n/a through 2.2.0 Description The issue is related to Improper Privilege Management, allowing Privilege Escalation in HasThemes HT Mega. Recommendations For versions n/a through 2.2.0, at the moment, there is no...

PT-2024-19244 · Webwizards · Salesking

Name of the Vulnerable Software and Affected Versions: SalesKing versions 1.6.15 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in WebWizards SalesKing. Recommendations: For versions 1.6.15 and earlier, update to a version that includ...

PT-2024-25337 · Darren Cooney · Darren Cooney Instant Images

Name of the Vulnerable Software and Affected Versions: Darren Cooney Instant Images versions n/a through 6.1.0 Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in Darren Cooney Instant Images. Recommendations: For versions n/a through 6.1.0, at...

PT-2024-12952 · Givewp · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP versions 2.33.0 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in GiveWP. Recommendations: For versions 2.33.0 and earlier, update to a version later than 2.33.0 to resolve...