Lucene search
K

11 matches found

Cvelist
Cvelist
added 2026/04/15 10:21 a.m.26 views

CVE-2026-40778 WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through = 1.1.2...

5.3CVSS0.00163EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51686

Malicious code in bioql PyPI...

7.5CVSS8.7AI score0.00461EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/09 4:25 p.m.17 views

CVE-2025-49860 WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support.This issue affects Majestic Support: from n/a through = 1.1.0...

5.3CVSS0.0027EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.2 views

WordPress plugin Majestic Support 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin...

8.1CVSS8.7AI score0.00739EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/14 6:29 a.m.7 views

CVE-2024-13601

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS9.1AI score0.00308EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 6:27 a.m.5 views

CVE-2024-13600

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' directory. This makes it possible for unauthenticated attackers to extract...

7.5CVSS9.3AI score0.00461EPSS
Exploits0References1
OSV
OSV
added 2025/02/12 6:15 a.m.3 views

CVE-2024-13600

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' directory. This makes it possible for unauthenticated attackers to extract...

7.5CVSS7.3AI score0.00461EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/02/12 5:28 a.m.13 views

CVE-2024-13600 Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the 'majesticsupportdata' directory. This makes it possible for unauthenticated attackers to extract...

7.5CVSS0.00461EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/02/12 5:28 a.m.9 views

CVE-2024-13601 Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS4.4AI score0.00308EPSS
Exploits0References3
CVE
CVE
added 2025/02/12 5:28 a.m.49 views

CVE-2024-13600

CVE-2024-13600 concerns Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin for WordPress (affected: ≤1.0.5). An unauthenticated attacker can access sensitive data stored in the majesticsupportdata directory under /wp-content/uploads/majesticsupportdata, potentially including ...

7.5CVSS7.3AI score0.00461EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/02/12 5:28 a.m.13 views

CVE-2024-13601 Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS0.00308EPSS
Exploits0References3
Rows per page
Query Builder