Lucene search
+L

16 matches found

NVD
NVD
•added 2026/08/24 12:16 p.m.•14 views

CVE-2026-32471

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

8.5CVSS0.00357EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/24 12:16 p.m.•15 views

CVE-2026-28190

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

7.1CVSS0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 11:54 a.m.•13 views

CVE-2026-32471 WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

8.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/24 11:54 a.m.•24 views

CVE-2026-32471

ProLancer Element is a WordPress plugin affected by a subscriber-level SQL injection vulnerability in versions 1.4.8 and below . An authenticated subscriber (low privilege) can exploit this remotely over the network with low complexity and no user interaction. The CVSS 3.1 score is 8.5 (HIGH) , w...

8.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/24 11:54 a.m.•61 views

CVE-2026-32471 WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

8.5CVSS0.00357EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/24 11:54 a.m.•15 views

EUVD-2026-64799

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

8.5CVSS5.9AI score0.00357EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/24 11:54 a.m.•16 views

EUVD-2026-64798

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

7.1CVSS5.2AI score0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 11:54 a.m.•16 views

CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

7.1CVSS5.8AI score0.00338EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/24 11:54 a.m.•27 views

CVE-2026-28190

CVE-2026-28190 is a Broken Access Control vulnerability in the ProLancer Element WordPress plugin, affecting versions 1.4.8 and earlier . The flaw allows users with the Subscriber role to perform actions beyond their intended privilege level, resulting in primarily integrity impact and minor avai...

7.1CVSS5.8AI score0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/24 11:54 a.m.•53 views

CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

7.1CVSS0.00338EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/24 7:56 a.m.•9 views

WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jamaal ahmed in WordPress Plugin ProLancer Element versions = 1.4.8...

8.5CVSS5.8AI score0.00357EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/24 7:55 a.m.•13 views

WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jamaal ahmed in WordPress Plugin ProLancer Element versions = 1.4.8...

7.1CVSS5.2AI score0.00338EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•4 views

CVE-2026-28190: Missing Authorization

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

7.1CVSS5.7AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•22 views

PT-2026-80831

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

7.1CVSS5.2AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•19 views

PT-2026-80832

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

8.5CVSS5.8AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•5 views

CVE-2026-32471: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...

8.5CVSS5.8AI score0.00357EPSS
SaveExploits0References2
Rows per page
Query Builder