206 matches found
CVE-2024-37092
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...
CVE-2024-37091
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0;...
CVE-2024-35677
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...
CVE-2024-37093
Cross-Site Request Forgery CSRF vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through = 3.2.1...
CVE-2024-37093
Cross-Site Request Forgery CSRF vulnerability in StylemixThemes MasterStudy LMS allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through 3.2.1...
CVE-2024-37093
CVE-2024-37093 describes a CSRF vulnerability in the WordPress plugin MasterStudy LMS by StylemixThemes, affecting versions n/a to 3.2.1. NVD lists CVSS v3.1 base score 8.8 (HIGH) with impact to confidentiality, integrity, and availability. The connected documents confirm the existence and scope ...
CVE-2024-37093 WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through = 3.2.1...
The vulnerability of the StylemixThemes plugin in the eRoom – Zoom Meetings & Webinar system of the WordPress content management system, which allows a hacker to escalate their privileges.
The vulnerability of the StylemixThemes plugin in eRoom – a tool for Zoom meetings and webinars within the WordPress content management system – is related to the absence of authentication procedures. Exploiting this vulnerability could allow attackers to increase their privileges remotely...
CVE-2023-40011
Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42...
CVE-2022-43472
Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6...
CVE-2023-40011 WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability
Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42...
CVE-2022-43472 WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6...
CVE-2022-43472 WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6...
CVE-2022-43472
CVE-2022-43472 affects the WordPress plugin eRoom – Zoom Meetings & Webinars (StylemixThemes eRoom) up to version 1.4.6, with a Missing Authorization (Broken Access Control) vulnerability due to incorrectly configured access control security levels. The issue allows unauthorized access due to ins...
CVE-2024-37269
CVE-2024-37269 describes a Missing Authorization flaw in the WordPress plugin Masterstudy Elementor Widgets up to version 1.2.2 . The vulnerability is reported as an unauthenticated/broken access control issue, meaning an attacker could access restricted data or functions without credentials, as ...
CVE-2024-37269 WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2...
CVE-2024-37094
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MasterStudy LMS: from n/a through 3.2.12...
CVE-2024-37094
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MasterStudy LMS: from n/a through 3.2.12...