10 matches found
CVE-2026-27344
Inseri Core（WordPress 插件）中的失效访问控制 插件： Inseri Core 受影响组件： /includes/restapi.php 漏洞类型： 失效访问控制（缺少授权） 状态： 于 2026 年 8 月报告–以重复 为由关闭。 摘要 今年夏天测试时，我发现了 Inseri Core WordPress 插件中存在一个失效访问控制漏洞。 该插件暴露了一个由“导出”按钮使用的 REST API 端点，允许下载文章/页面的存档。此端点没有 正确验证当前用户的权限或内容的发布状态。 因此，未认证（或低权限）用户可以下载文章的存档，即使该文章已被设置为草稿 或已删除 。...
CVE-2026-27344
Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through = 1.0.5...
EUVD-2026-9616
Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through = 1.0.5...
CVE-2026-27344
Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through = 1.0.5...
CVE-2026-27344
CVE-2026-27344 : Missing Authorization vulnerability in the WordPress plugin inseri core (inseri-core) affects versions n/a through
CVE-2026-27344 WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through = 1.0.5...
CVE-2026-27344
Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through = 1.0.5...
CVE-2026-27344 WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through = 1.0.5...
PT-2026-23237
Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through = 1.0.5...
