862 matches found
CVE-2024-4661
The WP Reset plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveajax function in all versions up to, and including, 2.02. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the val...
CVE-2024-5087
CVE-2024-5087 affects the Minimal Coming Soon – Coming Soon Page WordPress plugin. The vulnerability is caused by missing capability checks in AJAX handlers (validate_ajax, deactivate_ajax, save_ajax) on all versions up to 2.38, enabling authenticated users with Subscriber-level access and above ...
CVE-2024-4661
CVE-2024-4661 (WP Reset) – WordPress Plugin . Vulnerability due to missing capability check in the save_ajax function across versions up to 2.02, enabling authenticated users with subscriber-level access and above to modify the value of the “License Key” field under the Activate Pro License setti...
CGA-P8X9-CM52-2Q6C
Bulletin has no description...
CGA-FJGQ-VVM4-WJ8J
Bulletin has no description...
CGA-X9FQ-R9XX-4QRC
Bulletin has no description...
CGA-WJGG-W6RV-8F5V
Bulletin has no description...
CGA-HHX2-M33W-5HQ6
Bulletin has no description...
WordPress WP Reset plugin <= 2.02 - Missing Authorization to License Key Modification vulnerability
Missing Authorization to License Key Modification vulnerability discovered by Foxyyy in WordPress Plugin WP Reset versions = 2.01...
CGA-FWRH-63GM-4GMG
Bulletin has no description...
CGA-X2G6-8WJ4-MP4X
Bulletin has no description...
CGA-7WQW-FVHC-4VCJ
Bulletin has no description...
CGA-G39C-CP8Q-6MX6
Bulletin has no description...
CGA-F9GX-R4Q9-8H69
Bulletin has no description...
CGA-FRCJ-XRWW-85FR
Bulletin has no description...
CGA-J4R5-F9X8-VR29
Bulletin has no description...
CGA-F9WH-4XW4-MPGJ
Bulletin has no description...
CGA-WJ6R-67RF-J8M7
Bulletin has no description...