1047 matches found
PT-2024-7361 · WordPress · Ultimate Membership Pro
Name of the Vulnerable Software and Affected Versions: Ultimate Membership Pro versions through 12.6 Description: The issue is related to improper privilege management in the Ultimate Membership Pro plugin for WordPress, which can allow an attacker to escalate their privileges. Recommendations: F...
CVE-2024-34620
Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service...
CVE-2024-34620
CVE-2024-34620 describes an improper privilege management issue in SumeNNService (Samsung Mobile) prior to SMR Aug-2024 Release 1, enabling a local attacker to start a privileged service. The vulnerability is rated HIGH with both CVSS v3.1 metrics indicating LOCAL access, LOW attack complexity, a...
VulnCheck KEV: CVE-2024-43153
Improper Privilege Management vulnerability in WofficeIO Woffice allows Privilege Escalation.This issue affects Woffice: from n/a through 5.4.10...
CVE-2023-52209
CVE-2023-52209 affects WPForms User Registration (WordPress plugin). Affected versions:
CVE-2024-38770 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability
Improper Privilege Management vulnerability in Revmakx Backup and Staging by WP Time Capsule allows Privilege Escalation, Authentication Bypass.This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.20...
CVE-2024-39633
CVE-2024-39633 covers an Improper Privilege Management vulnerability in the WordPress plugin PowerPack for Beaver Builder . The issue enables a Privilege Escalation path for users with at least Contributor+ privileges, allowing elevation of rights within the plugin. Affected versions are up to an...
PT-2024-28211 · Unknown · Webappick Ctx Feed
Name of the Vulnerable Software and Affected Versions: WebAppick CTX Feed versions n/a through 6.5.6 Description: The issue is related to Improper Privilege Management in WebAppick CTX Feed, allowing Privilege Escalation. Recommendations: For versions n/a through 6.5.6, update to a version that...
PT-2024-28570 · Elementor · Powerpack Pro For Elementor
Name of the Vulnerable Software and Affected Versions: PowerPack Pro for Elementor versions 2.10.14 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation. Recommendations: For PowerPack Pro for Elementor versions 2.10.14 and earlier,...
PT-2024-28206 · WordPress · Backup/Staging By Wp Time Capsule
Name of the Vulnerable Software and Affected Versions: Backup and Staging by WP Time Capsule versions 1.22.20 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation and Authentication Bypass. Recommendations: For versions 1.22.20 and earlier,...
CVE-2024-40802
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be able to elevate their privileges...
Huawei EMUI and Huawei HarmonyOS elevation of privilege vulnerability (CNVD-2025-07822)
Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei HarmonyOS is an operating system... An elevation of privilege vulnerability exists in Huawei EMUI and Huawei HarmonyOS, which stems from improper...
The vulnerability of the PowerScale OneFS operating system, related to incorrect privilege assignment, allows a perpetrator to trigger a service failure and increase their privileges.
The vulnerability of the PowerScale OneFS operating system is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to cause service failures and increase their privileges...
The vulnerability of the PowerScale OneFS operating system, related to incorrect privilege assignment, allows attackers to elevate their privileges.
The vulnerability of the PowerScale OneFS operating system is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
CVE-2024-6908
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data...
VulnCheck KEV: CVE-2024-38770
Improper Privilege Management vulnerability in Revmakx Backup and Staging by WP Time Capsule allows Privilege Escalation, Authentication Bypass.This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.20...
WordPress plugin Jobmonster security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-27659 · WordPress · Wp User Switch
Name of the Vulnerable Software and Affected Versions: WP User Switch versions 1.1.0 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation. Recommendations: For WP User Switch versions 1.1.0 and earlier, update to a version that contains...
Rockwell Automation FactoryTalk System Services and Policy Manager
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.0 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk System Services and Policy Manager Vulnerabilities : Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...
