Lucene search
+L

737 matches found

CNNVD
CNNVD
added 2025/10/26 12:00 a.m.16 views

WordPress plugin Password Policy Manager | Password Manager Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

4.3CVSS5.7AI score0.00188EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/25 9:32 a.m.11 views

EUVD-2025-35926

The Password Policy Manager | Password Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'moppmajax' AJAX endpoint in all versions up to, and including, 2.0.5. This makes it possible for authenticated attackers, with...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/25 6:49 a.m.35 views

CVE-2025-11255 Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out

The Password Policy Manager | Password Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'moppmajax' AJAX endpoint in all versions up to, and including, 2.0.5. This makes it possible for authenticated attackers, with...

4.3CVSS0.00188EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/25 6:49 a.m.6 views

CVE-2025-11255 Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out

The Password Policy Manager | Password Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'moppmajax' AJAX endpoint in all versions up to, and including, 2.0.5. This makes it possible for authenticated attackers, with...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/25 6:49 a.m.22 views

CVE-2025-11255

Summary (CVE-2025-11255) The Password Policy Manager | Password Manager WordPress plugin is vulnerable to unauthorized data modification due to a missing capability check on the moppm_ajax AJAX endpoint in all versions up to and including 2.0.5 . An attacker with Subscriber+ privileges can cause ...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/10/25 3:02 a.m.16 views

WordPress Password Policy Manager plugin <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out vulnerability

Missing Authorization to Authenticated Subscriber+ Configuration Log Out vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Password Policy Manager versions = 2.0.5...

4.3CVSS6.9AI score0.00188EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/25 12:00 a.m.17 views

PT-2025-43719

Name of the Vulnerable Software and Affected Versions Password Policy Manager | Password Manager plugin for WordPress versions through 2.0.5 Description The Password Policy Manager | Password Manager plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing...

4.3CVSS6.1AI score0.00188EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/10/24 12:00 a.m.17 views

PT-2025-43670

Name of the Vulnerable Software and Affected Versions Microweber CMS version 2.0 Description The application does not enforce minimum password length or complexity during password resets. This allows users to set weak passwords, including single-character passwords, potentially leading to account...

8.3CVSS6.6AI score0.00427EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/10/07 6:09 a.m.26 views

CVE-2025-11322

A flaw has been found in Mangati NovoSGA up to 2.2.12. The impacted element is an unknown function of the file /novosga.users/new of the component User Creation Page. Executing manipulation of the argument Senha/Confirmação da senha can lead to weak password requirements. The attack can be launch...

6.3CVSS6.4AI score0.00359EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2016-7915

Malware in sbrugna...

7.5CVSS6.4AI score0.047EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-25372

Malware in sbrugna...

7.5CVSS6.1AI score0.01033EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2015-4410

Malware in sbrugna...

2.6CVSS6.4AI score0.01178EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2020-17844

Malware in sbrugna...

9.8CVSS7.5AI score0.01578EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-5242

Malware in sbrugna...

3.5CVSS6.9AI score0.04968EPSS
SaveExploits0References21
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-7629

Malware in sbrugna...

7.5CVSS7.6AI score0.00554EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.18 views

EUVD-2011-4512

Malware in sbrugna...

6.8CVSS6.1AI score0.02066EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2004-1186

Malware in sbrugna...

7.2CVSS8.7AI score0.00734EPSS
SaveExploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2019-0846

Malware in sbrugna...

8.1CVSS5.8AI score0.01285EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-24914

Malware in sbrugna...

9.8CVSS9.4AI score0.01184EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-5444

Malware in sbrugna...

5CVSS6.4AI score0.01369EPSS
SaveExploits0References6
Rows per page
Query Builder