CVE-2024-52382 WordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability

Missing Authorization vulnerability in medmatech Matix Popup Builder medma-matix allows Privilege Escalation.This issue affects Matix Popup Builder: from n/a through = 1.0.0...

CVE-2024-52382

CVE-2024-52382 — Normal mode Affected software: Medma Technologies Matix Popup Builder (WordPress plugin) ≤ 1.0.0.Vulnerability: Missing Authorization leading to Privilege Escalation via unauthorized modification of plugin options.Root cause: Lack of capability check on a function across all vers...

PT-2024-35220 · Medma Technologies · Matix Popup Builder

Name of the Vulnerable Software and Affected Versions: Matix Popup Builder versions 1.0.0 and earlier Description: A Missing Authorization issue in Medma Technologies Matix Popup Builder allows Privilege Escalation. This can lead to unauthorized access and elevation of privileges. Recommendations...

WordPress plugin Matix Popup Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress WP Popup Window Maker Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Popup Window Maker Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-52421 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID d87d598550d7 Credits SOPROBRO Required...

WordPress Matix Popup Builder plugin <= 1.0.0 - Arbitrary Option Update to Privilege Escalation vulnerability

Arbitrary Option Update to Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Matix Popup Builder versions = 1.0.0...

WordPress Matix Popup Builder Plugin <= 1.0.0 is vulnerable to Privilege Escalation

Software Matix Popup Builder Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-52382 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 5c4697e5f82c Credits João...

WordPress Popup Image plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Popup Image versions = 1.0.1...

WordPress Popup Image Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Popup Image Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51811 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6d6327c85e67 Credits SOPROBRO Required privilege Contributor...

The vulnerability of the Form Validation Popup Handler component in the Firefox web browser, related to the disclosure of information that allows a violator to trigger a service denial.

The vulnerability of the Form Validation Popup Handler component in the Firefox web browser is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2024-34677 · Unknown · Vpn Module

Name of the Vulnerable Software and Affected Versions: VPN module affected versions not specified Description: The issue concerns a vulnerability of pop-up windows belonging to no app in the VPN module. Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a pop-up window in the vpn module indicating no application attribution. An attacker...

CVE-2024-47358

Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker.This issue affects Popup Maker: from n/a through = 1.19.2...

CVE-2024-47359

Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2...

CVE-2024-47317

Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WPQuads: from n/a through = 2.0.84...

CVE-2024-37096

Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1...

CVE-2024-37096 WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1...

CVE-2024-37096 WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1...

CVE-2024-37096

CVE-2024-37096 — WordPress Popup Box plugin contains a missing/incorrectly configured authorization mechanism up to version 4.5.1. The vulnerability is described as Missing Authorization, with a CVSS base score of 4.3 (Medium) and attack vector over the network, requiring low privileges and no us...

CVE-2024-47317

The CVE-2024-47317 entry covers a Missing Authorization/Broken Access Control issue in the WordPress plugin Ads by WPQuads (WPQuads Ads) versions up to 2.0.84. The vulnerability is due to incorrectly configured access control, enabling unauthorized access for subscribers. Patch details in the con...