Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.11 views

CVE-2025-69313

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 5.0.3...

7.5CVSS5.4AI score0.00287EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.3 views

EUVD-2025-205230

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

7.5CVSS6.4AI score0.00201EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.7 views

CVE-2025-68606

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through = 5.0.3...

5.3CVSS0.00201EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.3 views

CVE-2025-55707

Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through = 4.1.35...

7.2CVSS7AI score0.0034EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.2 views

EUVD-2025-204195

Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through = 4.1.35...

7.2CVSS6.5AI score0.0034EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.2 views

PT-2025-52050

Name of the Vulnerable Software and Affected Versions PostX versions through 4.1.36 Description An authorization issue exists in WPXPO PostX ultimate-post due to incorrectly configured access control security levels. This allows exploitation of the system. Recommendations Update PostX to a versio...

7.1CVSS6.5AI score0.00211EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/07/25 2:15 p.m.4 views

CVE-2023-36385

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 2.9.9...

7.1CVSS5.8AI score0.00351EPSS
Exploits0References3
Rows per page
Query Builder