CVE-2024-37214 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability

Missing Authorization vulnerability in Dropshipping Guru Ali2Woo Lite Exploiting Incorrectly Configured Access Control Security Levels, Stored XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

CVE-2024-37218

CVE-2024-37218 describes a Missing Authorization vulnerability in WordPress Page Builder Sandwich – Front-End Page Builder (Page Builder Sandwich) up to version 5.1.0. The issue stems from incorrectly configured access control security levels, enabling unauthorized access to protected functionali...

CVE-2024-37220

CVE-2024-37220 describes a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Optinly by OptinlyHQ. It affects Optinly versions available up to and including 1.0.18 (n/a through 1.0.18 in the initial description). The issue stems from incorrectly configured access...

CVE-2024-37220 WordPress Optinly plugin <= 1.0.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optinly: from n/a through 1.0.18...

CVE-2024-37232 WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hercules Core: from n/a through 6.5...

CVE-2024-37232

CVE-2024-37232 is a Missing Authorization vulnerability in Hercules Core (affected: versions n/a through 6.5) that allows exploitation through misconfigured Access Control settings, enabling unauthorized updates to core settings. The issue originates from an authority check flaw that fails to pro...

CVE-2024-37254 WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in mndpsingh287 File Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects File Manager: from n/a through 7.2.7...

CVE-2024-37269 WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2...

CVE-2024-37269

CVE-2024-37269 describes a Missing Authorization flaw in the WordPress plugin Masterstudy Elementor Widgets up to version 1.2.2 . The vulnerability is reported as an unauthenticated/broken access control issue, meaning an attacker could access restricted data or functions without credentials, as ...

CVE-2024-37276 WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.1...

CVE-2024-37276

CVE-2024-37276 concerns the WordPress plugin Featured Image from URL (FIFU). Public records show a Missing Authorization vulnerability allowing exploitation of incorrectly configured access control security levels in the FIFU component that handles Featured Image from URL. Affected versions are l...

CVE-2024-37276 WordPress Featured Image from URL (FIFU) plugin <= 4.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.1...

CVE-2024-37415 WordPress E2Pdf plugin <= 1.20.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through = 1.20.27...

CVE-2024-37415

CVE-2024-37415 – E2Pdf WordPress Plugin Missing Authorization (Mode C details) Affected software: WordPress plugin E2Pdf – Export To Pdf Tool for WordPress, versions from n/a up to and including 1.20.27. Root cause / vulnerability class: Missing Authorization vulnerability (broken access control)...

CVE-2024-37425

CVE-2024-37425 corresponds to a Missing Authorization vulnerability in Automattic Newspack Blocks (WordPress plugin) up to version 3.0.8. Connected sources describe an Authenticated (Contributor+) scenario involving broken/incorrect access control security levels and note that the vulnerability i...

CVE-2024-37425 WordPress Newspack Blocks plugin <= 3.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Automattic Newspack Blocks newspack-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack Blocks: from n/a through 3.0.8...

CVE-2024-37427 WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.21...

CVE-2024-37439

CVE-2024-37439 is a Missing Authorization vulnerability in Uncanny Toolkit Pro for LearnDash. Public sources describe it as an access-control weakness that could enable subscriber-level abuse, including arbitrary post/page duplication for Subscriber+ variants. Affected product is Uncanny Toolkit ...

CVE-2024-37439 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability

Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0...

CVE-2024-37427

The CVE-2024-37427 case concerns the WordPress Timetics plugin. Affected versions are Timetics 1.0.0 through 1.0.21, with a Missing Authorization / Broken Access Control vulnerability arising from incorrectly configured access control. The issue permits unauthenticated access to certain functions...