CVE-2022-0952

CVE-2022-0952 خريطة الموقع من click5 1.0.36 - تحديث خيارات غير موثوق به بدون مصادقة الوصف لا يقوم الإضافة بإجراء فحوصات التفويض و CSRF عند تحديث الخيارات عبر نقطة REST، ولا يضمن أن الخيار المراد تحديثه ينتمي إلى الإضافة. نتيجة لذلك، يمكن للمهاجمين غير المصادق عليهم تغيير خيارات المدونة التعسفية،...

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - مشترك+ تحديث خيارات تعسفي الوصف إضافة Content Mask لووردبريس قبل الإصدار 1.8.4.1 لا تحتوي على فحوصات التفويض وCSRF في العديد من إجراءات AJAX، كما أنها لا تتحقق من الخيار الذي سيتم تحديثه للتأكد من أنه ينتمي إلى الإضافة. ونتيجة لذلك، يمكن لأي مستخدم مصادق، مثل...

CVE-2023-3124

CVE-2023-3124 CVE-2023-3124 إثبات المفهوم هذا استغلال إثبات المفهوم PoC لـ CVE-2023-3124، وهي ثغرة في إضافة Elementor Pro لووردبريس. الوصف: إضافة Elementor Pro لووردبريس عرضة لتعديل البيانات غير المصرح به بسبب عدم وجود فحص للصلاحية على دالة updatepageoption في الإصدارات حتى 3.11.6. وهذا يجعل من...

Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...

ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

freemius-exploit

freemius-exploit Freemius Library 2.2.4 - Mise à jour arbitraire d'options pour Subscriber+ Description La bibliothèque, utilisée dans de nombreux plugins, ne vérifie pas correctement les autorisations lors de la mise à jour des options du blog, ce qui permet à tout utilisateur authentifié, tel...

CVE-2024-11643

CVE-2024-11643 الإضافة Accessibility من AllAccessible history.pushState'', '', '/'; d...

CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - نقص التفويض لتحديث الخيارات التعسفية مشترك فما فوق الوصف: ملحق WooODT Lite لووردبريس عرضة لتعديل غير مصرح به للبيانات بسبب عدم وجود فحص صلاحيات في الدالة byconsolewooodtadminfieldssettingfiles المرتبطة عبر AJAX في الإصدارات حتى 2.4.6. هذا يتيح للمهاجمين...

CVE-2026-85681 WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

CVE-2026-19840 Notiqoo < 1.4.14 - Contributor+ Arbitrary Option Update via Multiple AJAX Actions

The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing users with a role as low as contributor to modify arbitrary WordPress options, which can be used to deactivate Notiqoo...

WordPress Notiqoo plugin < 1.4.14 - Contributor+ Arbitrary Option Update vulnerability

Contributor+ Arbitrary Option Update vulnerability discovered by Seongwon Lee in WordPress Plugin Notiqoo – Order Notification & Customer Chat for WooCommerce versions 1.4.14...

CVE-2026-19840 Notiqoo < 1.4.14 - Contributor+ Arbitrary Option Update via Multiple AJAX Actions

The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing users with a role as low as contributor to modify arbitrary WordPress options, which can be used to deactivate Notiqoo...

CVE-2026-19840

The Notiqoo WordPress plugin (specifically the Order Notification & Customer Chat for WooCommerce plugin) versions before 1.4.14 is vulnerable to an incorrect authorization flaw. The plugin fails to perform adequate capability checks on several of its AJAX actions and constructs the name of the o...

WordPress WPLP Cookie Consent plugin < 4.4.2 - Unauthenticated IAB TCF Consent Option Update vulnerability

Unauthenticated IAB TCF Consent Option Update vulnerability discovered by Alex Spataru in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.2...

CVE-2026-17553

The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to and including 5.9.3 . The ec_ajax_save_page_default_options() AJAX handler iterates over every $_POST key and passes it directly into update_option() without an allowlist. Access is gated on the manage_op...

CVE-2026-17522 Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF

The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and writes every submitted parameter into its own options, allowing attackers to make a logged in administrator overwrite arbitrary Newsletters WordPress plugin...

WordPress Newsletters plugin < 4.17 - Arbitrary Plugin Option Update vulnerability

Arbitrary Plugin Option Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin Newsletters versions 4.17...

CVE-2026-13415 CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings

The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls to...

WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action vulnerability

Authenticated Subscriber+ Privilege Escalation via Arbitrary Option Update to wpematicoimportsettings adminaction vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin WPeMatico RSS Feed Fetcher versions = 2.8.24...

CVE-2026-75982

The LearnPress WordPress plugin (versions up to and including 4.4.4 ) is vulnerable to unauthorized modification of arbitrary WordPress options via the learnpress_create_page AJAX action. The LP_Admin_Ajax::create_page() handler validates only the edit_pages capability and a wp_rest nonce (both a...