20296 matches found
EUVD-2025-200177
The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles function in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to inject arbitrary file paths int...
PT-2025-48608
The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles function in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to inject arbitrary file paths int...
Exploit for CVE-2025-6440
🔓 WC Designer Pro - RCE Exploit Unauthenticated Remote Co...
WordPress EduKart Pro plugin elevation of privilege vulnerability
WordPress EduKart Pro plugin is an e-commerce plugin for the WordPress platform that is primarily used to build and manage online stores. WordPress EduKart Pro plugin has an elevation of privilege vulnerability that stems from the edukartproregisteruserfrontend function not restricting user...
Appleton UPSMON-PRO UPSMONProService Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Appleton UPSMON-PRO. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPSMONProService service, which listens on UDP port 2601 by default. The issue...
CVE-2025-13559
The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukartproregisteruserfrontend' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to...
WordPress EduKart Pro plugin <= 1.0.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Alyudin Nafiie in WordPress Plugin EduKart Pro versions = 1.0.3...
CVE-2025-13559
The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukartproregisteruserfrontend' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to...
CVE-2025-13559
Affected software: WordPress EduKart Pro plugin (versions up to 1.0.3). Root cause: The function edukart_pro_register_user_front_end does not restrict permissible registration roles, enabling an unauthenticated user to register as an administrator. Impact: Privilege escalation to full administrat...
CVE-2025-13559 EduKart Pro <= 1.0.3 - Unauthenticated Privilege Escalation
The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukartproregisteruserfrontend' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to...
EUVD-2025-199535
The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukartproregisteruserfrontend' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to...
CVE-2025-13559 EduKart Pro <= 1.0.3 - Unauthenticated Privilege Escalation
The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukartproregisteruserfrontend' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to...
CVE-2025-63952
A Cross-Site Request Forgery CSRF in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
CVE-2025-63953
A Cross-Site Request Forgery CSRF in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...
PT-2025-47984
Name of the Vulnerable Software and Affected Versions EduKart Pro plugin for WordPress versions up to and including 1.0.3 Description The EduKart Pro plugin for WordPress is susceptible to a privilege escalation issue. The edukart pro register user front end function does not adequately restrict...
Ubuntu Pro 24.04 LTS Realtime Kernel : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-7887-1)
The remote Ubuntu Pro 24.04 LTS Realtime Kernel host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7887-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This upda...
WordPress plugin EduKart Pro 安全漏洞
WordPress EduKart Pro plugin is an e-commerce plugin for the WordPress platform that is primarily used to build and manage online stores. WordPress EduKart Pro plugin has an elevation of privilege vulnerability that stems from the edukartproregisteruserfrontend function not restricting user...
EUVD-2025-198970
A Cross-Site Request Forgery CSRF in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request...