Lucene search
+L

4247 matches found

CNNVD
CNNVD
added 2021/04/05 12:00 a.m.9 views

WordPress plugin WP Page Builder 访问控制错误漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in the WP Pag...

4.3CVSS5.1AI score0.00689EPSS
SaveExploits2References3
OSV
OSV
added 2020/05/17 1:15 a.m.8 views

CVE-2020-13126

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is...

9.9CVSS7.1AI score0.08565EPSS
SaveExploits1References2
OSV
OSV
added 2019/09/13 1:15 p.m.12 views

CVE-2019-12517

An XSS issue was discovered in the slickquiz plugin through 1.3.7.1 for WordPress. The savequizscore functionality available via the /wp-admin/admin-ajax.php endpoint allows unauthenticated users to submit quiz solutions/answers, which are stored in the database and later shown in the WordPress...

6.1CVSS6.8AI score0.01248EPSS
SaveExploits4References2
OSV
OSV
added 2019/08/27 12:15 p.m.8 views

CVE-2019-15648

The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a Subscriber...

6.5CVSS5.8AI score0.00625EPSS
SaveExploits2References2
OSV
OSV
added 2018/02/08 7:29 a.m.4 views

CVE-2018-0116

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to incorrect RADIUS user...

7.2CVSS5.8AI score0.0106EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/02/08 12:00 a.m.9 views

Cisco Policy Suite Authentication Bypass Vulnerability

Cisco Policy Suite CPS is a next-generation policy management solution from Cisco. The program provides user-based business rules, applications and real-time management of network resources and other functions. RADIUS authentication module is one of the RADIUS protocol authentication module. An...

7.2CVSS7.1AI score0.0106EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/07/31 12:00 a.m.21 views

WordPress Draft Creation Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a security vulnerability, users with Subscriber rights can create drafts through the Quick Draft feature...

4CVSS6.7AI score0.07479EPSS
SaveExploits1References1
Rows per page
Query Builder