Lucene search
+L

6611 matches found

NVD
NVD
added 2023/12/20 2:15 p.m.30 views

CVE-2023-41796

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0...

6.5CVSS0.00359EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/20 2:15 p.m.6 views

CVE-2023-41796

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0...

6.5CVSS5.8AI score0.00359EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/20 2:15 p.m.4 views

CVE-2023-38513

Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine Media Organizer & Lightroom.This issue affects Photo Engine Media Organizer & Lightroom: from n/a through 6.2.5...

5.4CVSS7.3AI score0.00388EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/20 2:15 p.m.23 views

CVE-2023-38513

Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine Media Organizer & Lightroom.This issue affects Photo Engine Media Organizer & Lightroom: from n/a through 6.2.5...

5.4CVSS0.00388EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/20 2:15 p.m.24 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0...

6.4CVSS7.2AI score0.00359EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/20 2:15 p.m.29 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine Media Organizer & Lightroom.This issue affects Photo Engine Media Organizer & Lightroom: from n/a through 6.2.5...

5.5CVSS7.2AI score0.00388EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/20 1:52 p.m.35 views

CVE-2023-38513 WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine Media Organizer & Lightroom.This issue affects Photo Engine Media Organizer & Lightroom: from n/a through 6.2.5...

5.4CVSS5.8AI score0.00388EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/20 1:52 p.m.59 views

CVE-2023-38513

CVE-2023-38513 affects WordPress Photo Engine (Media Organizer & Lightroom) plugin, specifically Jordy Meow Photo Engine via the Photo Engine/WPLR‑Sync component. It is an Authorization Bypass through a User‑Controlled Key (IDOR) vulnerability that can bypass access controls. Affected range: n/a ...

5.4CVSS6.6AI score0.00388EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/20 1:42 p.m.14 views

CVE-2023-41796 WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0...

5.3CVSS6.9AI score0.00359EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/20 1:42 p.m.32 views

CVE-2023-41796 WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0...

5.3CVSS6.7AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/20 1:42 p.m.54 views

CVE-2023-41796

The Sunshine Photo Cart plugin for WordPress (Sunshine Photo Cart: Free Client Galleries for Photographers) is affected by CVE-2023-41796. Affected versions are before 3.0.0 and the root cause is Insecure Direct Object References (IDOR) caused by authorization bypass via a user-controlled key, en...

6.5CVSS7.1AI score0.00359EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/20 12:0 a.m.6 views

WordPress Plugin Sunshine Photo Cart Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.5AI score0.00359EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/20 12:0 a.m.4 views

WordPress Plugin Photo Engine Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

5.4CVSS6.5AI score0.00388EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/19 9:15 p.m.3 views

CVE-2023-49812

Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005...

7.5CVSS7.3AI score0.00533EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/19 9:15 p.m.16 views

CVE-2023-49812

Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005...

7.5CVSS0.00533EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/19 9:15 p.m.17 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005...

5CVSS7.2AI score0.00533EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/19 8:55 p.m.16 views

CVE-2023-49812 WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005...

5.3CVSS7.6AI score0.00533EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/19 8:55 p.m.25 views

CVE-2023-49812 WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005...

5.3CVSS7.8AI score0.00533EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/19 8:55 p.m.82 views

CVE-2023-49812

CVE-2023-49812 affects WP Photo Album Plus plugins (WordPress) up to version 8.5.02.005 and is an Insecure Direct Object Reference (IDOR) vulnerability caused by missing validation on a user-controlled key. It allows unauthenticated access to unauthorized actions, as detailed by Patchstack/NVD/NV...

7.5CVSS7.8AI score0.00533EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/19 12:0 a.m.5 views

WordPress plugin WP Photo Album Plus security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.8AI score0.00533EPSS
SaveExploits0References3
Rows per page
Query Builder