Lucene search
+L

4040 matches found

Cvelist
Cvelist
added 2026/01/16 9:23 a.m.43 views

CVE-2025-14844 Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcpstripecreatesetupintentforsavedcard' function due to missing capability check. Additionally, the plugin does not check a user-controlled...

8.2CVSS0.00462EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/01/16 9:23 a.m.8 views

CVE-2025-14844 Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcpstripecreatesetupintentforsavedcard' function due to missing capability check. Additionally, the plugin does not check a user-controlled...

8.2CVSS5.3AI score0.00462EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2026/01/16 6:36 a.m.20 views

WordPress Membership Plugin - Restrict Content plugin <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure vulnerability

WordPress Membership Plugin - Restrict Content plugin = 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure vulnerability discovered by andrea bocchetti in WordPress Plugin Restrict Content versions = 3.2.16...

8.2CVSS7AI score0.00462EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/01/16 4:15 a.m.15 views

CVE-2026-1023

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS0.00527EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/16 3:43 a.m.5 views

CVE-2026-1023 Gotac|Statistics Database System - Missing Authentication

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS6.7AI score0.00527EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/16 3:43 a.m.44 views

CVE-2026-1023 Gotac|Statistics Database System - Missing Authentication

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS0.00527EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/16 3:43 a.m.7 views

CVE-2026-1023

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS5.5AI score0.00527EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/16 3:43 a.m.48 views

CVE-2026-1023

CVE-2026-1023 affects the Statistics Database System developed by Gotac. The vulnerability is described as a Missing Authentication flaw that allows unauthenticated remote attackers to directly exploit a specific functionality to query database contents. The connected sources corroborate the same...

8.7CVSS6.7AI score0.00527EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/01/16 3:16 a.m.14 views

CVE-2026-1019

Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/16 3:16 a.m.14 views

CVE-2026-1019

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00525EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/01/16 2:48 a.m.6 views

CVE-2026-1019

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/16 2:48 a.m.6 views

CVE-2026-1019

...

5.4AI score0.00525EPSS
SaveExploits0
CVE
CVE
added 2026/01/16 2:48 a.m.47 views

CVE-2026-1019

CVE-2026-1019 is associated with a Missing Authentication vulnerability in the Police Statistics Database System developed by Gotac. The core issue, as described in connected sources, is unauthenticated remote access enabling attackers to read, modify, and delete database contents via a specific ...

6.7AI score0.00525EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/01/16 2:48 a.m.44 views

CVE-2026-1019

...

0.00525EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.20 views

PT-2026-3206

Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality...

9.8CVSS7.1AI score0.00525EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.18 views

PT-2026-3242

Name of the Vulnerable Software and Affected Versions Restrict Content plugin for WordPress versions prior to 3.2.17 Description The Restrict Content plugin for WordPress is affected by a missing authentication issue. This occurs due to a missing capability check within the rcp stripe create setu...

8.2CVSS5.3AI score0.00462EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.28 views

PT-2026-3210

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS7.1AI score0.00527EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/15 10:32 p.m.11 views

CVE-2025-14058

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled...

3.2CVSS6.6AI score0.0016EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/14 10:20 p.m.6 views

CVE-2025-14058

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled...

3.2CVSS6.2AI score0.0016EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/14 10:20 p.m.37 views

CVE-2025-14058

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled...

3.2CVSS0.0016EPSS
SaveExploits0References1
Rows per page
Query Builder