Lucene search
+L

47693 matches found

Patchstack
Patchstack
•added 2025/12/12 12:21 a.m.•32 views

WordPress Secure Copy Content Protection and Content Locking plugin <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File vulnerability

Unauthenticated Sensitive Information Exposure via Exposed CSV Export File vulnerability discovered by Deadbee - NA in WordPress Plugin Secure Copy Content Protection and Content Locking versions = 4.9.2...

5.3CVSS6.7AI score0.0032EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•24 views

Apache Fineract security vulnerabilities

Apache Fineract is a set of open source digital financial services platform from the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from an...

9.1CVSS5.8AI score0.00428EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•23 views

WordPress plugin SecureCopy Content Protection and Content Locking has a cross-site request forgeing vulnerability.

WordPress and the WordPress plugin are products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

4.3CVSS5.6AI score0.00164EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•9 views

CVE-2025-14159: Cross-Site Request Forgery (CSRF)

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2. This is due to missing nonce validation on the 'ayssccpresultsexportfile' AJAX action. This makes it possible for unauthenticated...

4.3CVSS5.6AI score0.00164EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•13 views

CVE-2025-14442: Files or Directories Accessible to External Parties

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

5.3CVSS5.8AI score0.0032EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/12/12 12:00 a.m.•17 views

WordPress Plugin Portfolio and Projects Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Portfolio and Projects,...

4.3CVSS5.6AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•32 views

PT-2025-50926

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

5.3CVSS5.7AI score0.0032EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•23 views

PT-2025-50925

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2. This is due to missing nonce validation on the 'ays sccp results export file' AJAX action. This makes it possible for unauthenticate...

4.3CVSS4.8AI score0.00164EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•21 views

PT-2025-51017

CVE-2025-43523 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3. An app may be able to access sensitive user data. https://t.co/gGS83lscq6...

5.8AI score0.00187EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•14 views

PT-2025-51005

CVE-2025-43509 This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access sensitive user … https://t.co/68matrJhFp...

5.8AI score0.00206EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•22 views

WordPress plugin SecureCopy Content Protection and Content Locking has security vulnerabilities

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

5.3CVSS5.8AI score0.0032EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•21 views

Apple macOS Sequoia security vulnerabilities

Apple macOS Sequoia is an operating system from Apple USA. A security vulnerability exists in Apple macOS Sequoia prior to version 15.7.3, which originates from an application that may bypass startup constraint protection and execute malicious code with elevated privileges...

7.8CVSS6AI score0.0019EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•19 views

Apple macOS security vulnerabilities

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from insufficient data protection and could result in access to...

5.5CVSS5.8AI score0.00206EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/12/12 12:00 a.m.•21 views

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

5.5CVSS7.6AI score0.0025EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/12 12:00 a.m.•17 views

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

5.5CVSS7.6AI score0.0025EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/12 12:00 a.m.•17 views

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

5.5CVSS7.7AI score0.0025EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/12 12:00 a.m.•18 views

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

5.5CVSS7.7AI score0.0025EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/12 12:00 a.m.•20 views

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

5.5CVSS7.7AI score0.00273EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/12 12:00 a.m.•22 views

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

5.5CVSS7.7AI score0.0025EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/12 12:00 a.m.•24 views

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

5.5CVSS7.6AI score0.00203EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder