Authorization

The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 5.2.0.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible f...

CVE-2023-2548 RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change

The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 5.2.0.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible f...

WordPress plugin RegistrationMagic 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

super-g.watch Cross Site Scripting vulnerability OBB-3311376

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-38329

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3 Description A crash in the mempool free function within the Linux kernel's md Multiple Devices subsystem was resolved. The crash occurred during the execution of the lvm test...

CVE-2022-47598 WordPress WP Super Popup Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Plugins Pro WP Super Popup plugin = 1.1.2 versions...

CVE-2022-47598 WordPress WP Super Popup Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Plugins Pro WP Super Popup plugin = 1.1.2 versions...

CVE-2022-47598

This CVE concerns the WordPress WP Super Popup plugin (versions ≤ 1.1.2). The vulnerability is a Stored Cross-Site Scripting (XSS) that requires admin+ privileges to exploit. Multiple sources (NVD, Red Hat, WPVulnDB, PatchStack) describe the impact as XSS affecting settings handling, with exploit...

CVE-2022-47598: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Plugins Pro WP Super Popup plugin = 1.1.2 versions...

WordPress plugin WP Super Popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-15421 · WordPress · Wp Super Popup

Name of the Vulnerable Software and Affected Versions: WP Super Popup plugin versions = 1.1.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the WP Super Popup plugin. This vulnerability requires authentication with admin+ privileges...

CVE-2023-22894

Strapi through 4.5.5 allows attackers with access to the admin panel to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then th...

CVE-2023-27192

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the keywifisafenetcheckurl, KEYCirusscanwhitelist and KEYADNEWUSERAVOIDTIME parameters...

Design/Logic Flaw

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the keywifisafenetcheckurl, KEYCirusscanwhitelist and KEYADNEWUSERAVOIDTIME parameters...

CVE-2023-27191

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files...

PT-2023-20996

Name of the Vulnerable Software and Affected Versions DUALSPACE Super Secuirty version 2.3.7 Description An issue in DUALSPACE Super Secuirty allows an attacker to cause a denial of service via the key wifi safe net check url, KEY Cirus scan whitelist, and KEY AD NEW USER AVOID TIME parameters...

CVE-2023-27192

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the keywifisafenetcheckurl, KEYCirusscanwhitelist and KEYADNEWUSERAVOIDTIME parameters...

CVE-2023-27191

An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files...

CVE-2023-27192

CVE-2023-27192 affects DUALSPACE Super Security v2.3.7. The issue can cause denial of service by manipulating parameters key_wifi_safe_net_check_url, KEY_Cirus_scan_whitelist, and KEY_AD_NEW_USER_AVOID_TIME. Connected sources consistently reference the same product/version and impact. No detailed...

CVE-2023-27191

CVE-2023-27191 affects DUALSPACE Super Secuirty v2.3.7. A vulnerability in SharedPreference handling can allow an attacker to cause a denial of service. Documents indicate a PoC exists. CVSSv3.1: 7.5 HIGH (NETWORK, no user interaction). Root cause details are not explicitly described in the provi...