CVE-2020-15341

CVE-2020-15341 affects Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1. The vulnerability is an unauthenticated access issue in the update_all_realm_license API, enabling potential unauthorized operations. Public sources in the connected documents confirm an unauthenticated endpoint as the ro...

VulnCheck KEV: CVE-2020-36731

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction function...