Lucene search
K

19 matches found

Nuclei
Nuclei
added 13 hours ago9 views

WordPress Restrict User Access <= 2.5 - Cross-Site Scripting

WordPress Restrict User Access – Membership Plugin with Force versions before 2.6 is vulnerable to Reflected Cross-Site Scripting via the 'ruasection' parameter in the admin level edit page. id: CVE-2024-29138 info: name: WordPress Restrict User Access = 2.5 - Cross-Site Scripting author: Shivam...

7.1CVSS7.3AI score0.11554EPSS
Exploits0References3
OSV
OSV
added 2024/09/18 7:12 a.m.13 views

CVE-2024-46792 riscv: misaligned: Restrict user access to kernel memory

In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory rawcopyto,fromuser do not call accessok, so this code allowed userspace to access any virtual memory address...

3.3CVSS5.9AI score0.00034EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/09/18 7:12 a.m.13 views

CVE-2024-46792

In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory rawcopyto,fromuser do not call accessok, so this code allowed userspace to access any virtual memory address...

3.3CVSS5.3AI score0.00034EPSS
Exploits0
OSV
OSV
added 2024/03/19 2:15 p.m.3 views

CVE-2024-29138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force allows Reflected XSS.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.5...

6.1CVSS5.8AI score0.11554EPSS
Exploits0References1
NVD
NVD
added 2024/03/19 2:15 p.m.12 views

CVE-2024-29138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through = 2.5...

7.1CVSS6.9AI score0.11554EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/19 1:40 p.m.14 views

CVE-2024-29138 WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through = 2.5...

7.1CVSS7.2AI score0.11554EPSS
Exploits0References1
CVE
CVE
added 2024/03/19 1:40 p.m.56 views

CVE-2024-29138

The CVE-2024-29138 issue affects the WordPress Restrict User Access – Membership Plugin with Force (vulnerable:

7.1CVSS7.2AI score0.11554EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.2 views

PT-2024-22757

Name of the Vulnerable Software and Affected Versions Restrict User Access – Membership Plugin with Force versions n/a through 2.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

7.1CVSS8.5AI score0.11554EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.1 views

WordPress Plugin Restrict User Access Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS5.8AI score0.11554EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/03/18 12:0 a.m.9 views

WordPress Restrict User Access – Membership Plugin with Force Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software Restrict User Access – Membership Plugin with Force Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29138 Patch priority Medium CVSS severity Medium 7.1 Developer DEV Institute PSID 211a6e23f622 Credits...

7.1CVSS6.5AI score0.11554EPSS
Exploits0References2Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/03/18 12:0 a.m.0 views

VulnCheck KEV: CVE-2024-29138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through = 2.5...

6.1CVSS7.3AI score0.11554EPSS
Exploits0References1
OSV
OSV
added 2024/03/13 4:15 p.m.0 views

CVE-2024-0687

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API...

5.3CVSS7.3AI score
Exploits0References2
Prion
Prion
added 2024/03/13 4:15 p.m.13 views

Information disclosure

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API...

5CVSS6.9AI score0.00391EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.2 views

WordPress Plugin Restrict User Access Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.3AI score0.00391EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/02/26 12:0 a.m.13 views

WordPress Restrict User Access – Membership Plugin with Force Plugin <= 2.5 is vulnerable to Sensitive Data Exposure

Software Restrict User Access – Membership Plugin with Force Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0687 Patch priority Low CVSS severity Low 5.3 Developer DEV Institute PSID 388810d84a13...

5.3CVSS6.5AI score0.00391EPSS
Exploits0References3Affected Software1
WPVulnDB
WPVulnDB
added 2024/02/26 12:0 a.m.20 views

Restrict User Access – Ultimate Membership & Content Protection < 2.6 - Information Exposure

Description The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API...

5.3CVSS6.5AI score0.00391EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.5 views

WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.2.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Restrict User Access – Membership Plugin with Force plugin versions = 2.2.1. Solution Update the WordPress Restrict User Access – Membership Plugin with Force plugin plugin to the latest available version at least 2.2.2...

2.2AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.9 views

WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Restrict User Access – Membership Plugin with Force plugin versions = 2.2.1. Solution Update the WordPress Restrict User Access – Membership Plugin with Force plugin plugin to the latest available...

4AI score
Exploits0References2Affected Software1
CERT
CERT
added 2004/07/23 12:0 a.m.6 views

Sun Java System Portal Server fails to properly handle changes to display options

Overview There is a vulnerability in the Sun Java System Portal Server, which could allow a remote, authenticated user to gain access to the administrative credentials of the Calendar server. Description The Sun Java System Portal Server is a content management system that provides centralized...

6.9AI score
Exploits0References6
Rows per page
Query Builder