Lucene search
+L

10051 matches found

OSV
OSV
added 2024/02/08 9:15 a.m.6 views

CVE-2024-0965

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content...

5.3CVSS7.3AI score0.00482EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/08 9:15 a.m.19 views

Code injection

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content...

5CVSS7.3AI score0.00482EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/02/08 8:32 a.m.87 views

CVE-2024-0965

CVE-2024-0965 affects the WordPress Simple Page Access Restriction plugin (versions

5.3CVSS6.2AI score0.00482EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/08 8:32 a.m.11 views

CVE-2024-0965 Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content...

5.3CVSS6.7AI score0.00482EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/08 8:32 a.m.44 views

CVE-2024-0965 Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content...

5.3CVSS5.5AI score0.00482EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/08 12:0 a.m.9 views

PT-2024-15945 · WordPress · Simple Page Access Restriction

Name of the Vulnerable Software and Affected Versions: Simple Page Access Restriction plugin for WordPress versions up to, and including, 1.0.21 Description: The issue allows unauthenticated attackers to bypass page restrictions and view page content via the REST API. This is possible due to...

5.3CVSS6.2AI score0.00482EPSS
SaveExploits0References5
NVD
NVD
added 2024/02/07 5:15 p.m.37 views

CVE-2024-20255

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

8.2CVSS8.3AI score0.00603EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/07 5:15 p.m.32 views

Cross site request forgery (csrf)

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

5.8CVSS7.5AI score0.00603EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/07 4:15 p.m.48 views

CVE-2024-20255

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

8.2CVSS8.5AI score0.00603EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2024/02/07 12:0 a.m.20 views

Simple Page Access Restriction < 1.0.23 - Improper Access Control to Sensitive Information Exposure via REST API

Description The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content...

5CVSS6.8AI score0.00482EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/06 12:0 a.m.11 views

PT-2024-7126 · Trend Micro · Trend Micro Cloud Edge

Name of the Vulnerable Software and Affected Versions: Trend Micro Cloud Edge affected versions not specified Description: A command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. The vulnerability is related to th...

10CVSS7.5AI score0.02444EPSS
SaveExploits0References37
NVD
NVD
added 2024/02/05 10:16 p.m.31 views

CVE-2024-0969

The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Default Restriction" feature and view restricted post content...

5.3CVSS5.2AI score0.00482EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/05 10:16 p.m.36 views

Design/Logic Flaw

The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Default Restriction" feature and view restricted post content...

5CVSS7.1AI score0.00482EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/02/05 9:22 p.m.36 views

CVE-2024-0969 ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API

The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Default Restriction" feature and view restricted post content...

5.3CVSS5.5AI score0.00482EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/05 9:22 p.m.15 views

CVE-2024-0969 ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API

The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Default Restriction" feature and view restricted post content...

5.3CVSS6.6AI score0.00482EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/05 9:22 p.m.94 views

CVE-2024-0969

ARMember for WordPress

5.3CVSS6.2AI score0.00482EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/02/03 6:15 a.m.33 views

CVE-2024-0909

The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticat...

7.5CVSS5.7AI score0.00608EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/03 6:15 a.m.31 views

Information disclosure

The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticat...

5CVSS6.7AI score0.00608EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/03 5:38 a.m.25 views

CVE-2024-0909 Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass

The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticat...

5.3CVSS7.1AI score0.00608EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/03 5:38 a.m.40 views

CVE-2024-0909 Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass

The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.6.2. This is due to insufficient restrictions through the REST API on the posts/pages that protections are being place on. This makes it possible for unauthenticat...

5.3CVSS7.4AI score0.00608EPSS
SaveExploits0References3
Rows per page
Query Builder