2449 matches found
CVE-2024-32772: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9...
PT-2024-24844
Name of the Vulnerable Software and Affected Versions Metagauss ProfileGrid versions through 5.7.9 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations For versions through 5.7.9, upda...
CVE-2024-32808: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9...
PT-2024-24882 · Unknown · Metagauss Profilegrid
Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.9 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations: For versions through 5.7.9,...
PT-2024-24898 · WordPress · Rate My Post – Wp Rating System
Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System versions 3.4.4 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in the FeedbackWP Rate my Post – WP Rating System. Recommendations: For versions...
CVE-2024-32683
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5...
CVE-2024-32683
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5...
CVE-2024-32683
CVE-2024-32683 targets the WP Ultimate Review WordPress plugin. Connected sources describe an unauthenticated bypass via a user-controlled key/ID, enabling direct object reference and potentially bypassing review restrictions in versions up to 2.2.5. Public advisories (RH) label it as an Authoriz...
CVE-2024-32683 WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5...
CVE-2024-32683: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5...
PT-2024-24769 · WordPress · Wp Ultimate Review
Name of the Vulnerable Software and Affected Versions: Wp Ultimate Review versions 2.2.5 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations: For versions 2.2.5 and...
CVE-2023-6897
CVE-2023-6897 affects the EAN, UPC, ISBN Generator: Product Barcode Inventory for WooCommerce plugin (EAN for WooCommerce) for WordPress. The Red Hat entry confirms an Insecure Direct Object Reference in all versions up to 4.9.2 via the shortcode alg_wc_ean_product_meta, caused by missing validat...
CVE-2024-32604
Authorization Bypass Through User-Controlled Key vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5...
CVE-2024-32604
CVE-2024-32604 is reported as an Authorization Bypass Through User-Controlled Key affecting the WP-Recall plugin by Plechev Andrey, with impact described as an authorization bypass and affectation from an unknown range ending at version 16.26.5. The connected RH security entry mirrors this descri...
PT-2024-24726
Name of the Vulnerable Software and Affected Versions Plechev Andrey WP-Recall versions through 16.26.5 Description The issue is related to an Authorization Bypass Through User-Controlled Key. No information is provided about the estimated number of potentially affected devices worldwide or...
CVE-2024-32604: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5...
CVE-2024-1289
CVE-2024-1289 affects LearnPress – WordPress LMS Plugin. All versions up to 4.2.6.3 are vulnerable to Insecure Direct Object Reference (IDOR) due to missing validation on a user-controlled key when retrieving order data. Authenticated attackers can view orders placed by other users and guests, en...
CVE-2024-1289 LearnPress <= 4.2.6.3 - Insecure Direct Object Reference
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.6.3 due to missing validation on a user controlled key when looking up order information. This makes it possible for authenticated attackers to...
CVE-2024-1289 LearnPress <= 4.2.6.3 - Insecure Direct Object Reference
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.6.3 due to missing validation on a user controlled key when looking up order information. This makes it possible for authenticated attackers to...