CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

710 matches found

Patchstack•added 2025/10/25 3:2 a.m.•7 views

WordPress Password Policy Manager plugin <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out vulnerability

Missing Authorization to Authenticated Subscriber+ Configuration Log Out vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Password Policy Manager versions = 2.0.5...

4.3CVSS6.9AI score0.00188EPSS

Exploits0References1Affected Software1

Positive Technologies•added 2025/10/25 12:0 a.m.•7 views

PT-2025-43719

Name of the Vulnerable Software and Affected Versions Password Policy Manager | Password Manager plugin for WordPress versions through 2.0.5 Description The Password Policy Manager | Password Manager plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing...

4.3CVSS6.1AI score0.00188EPSS

Exploits0References6

Positive Technologies•added 2025/10/24 12:0 a.m.•6 views

PT-2025-43670

Name of the Vulnerable Software and Affected Versions Microweber CMS version 2.0 Description The application does not enforce minimum password length or complexity during password resets. This allows users to set weak passwords, including single-character passwords, potentially leading to account...

8.3CVSS6.6AI score0.00427EPSS

Exploits1References9

RedhatCVE•added 2025/10/07 6:9 a.m.•14 views

CVE-2025-11322

A flaw has been found in Mangati NovoSGA up to 2.2.12. The impacted element is an unknown function of the file /novosga.users/new of the component User Creation Page. Executing manipulation of the argument Senha/Confirmação da senha can lead to weak password requirements. The attack can be launch...

6.3CVSS6.4AI score0.00331EPSS

Exploits0References1