Lucene search
K

41 matches found

CVE
CVE
added 2026/03/25 4:14 p.m.2 views

CVE-2026-32488

CVE-2026-32488 affects the WordPress plugin User Registration (wpeverest) up to version 4.4.9 . The vulnerability arises from an incorrect privilege assignment that enables privilege escalation . Per the entry, the CVSS metrics indicate a Network exploit vector, high attack complexity, no privile...

8.1CVSS5.8AI score0.00062EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.22 views

CVE-2026-32488 WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through = 4.4.9...

8.1CVSS0.00062EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.0 views

CVE-2026-32488 WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through = 4.4.9...

5.8AI score0.00062EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin User Registration 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00062EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/23 3:21 p.m.2 views

WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin User Registration versions = 4.4.9...

8.1CVSS5.8AI score0.00062EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2026/03/18 2:26 a.m.3 views

EUVD-2026-12745

mdjnelson/moodle-modcustomcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser. Prior to versions 4.4.9 and 5.0.3, a teacher who holds mod/customcert:manage in any single course can read and silently overwrite certificate elements...

9.6CVSS5.8AI score0.00023EPSS
Exploits0References3
CVE
CVE
added 2026/02/19 2:58 p.m.7 views

CVE-2025-71247

SPIP 4.4.9 fixes an authenticated SSRF in the syndicated sites feature. CVE-2025-71247 affects SPIP

5.9AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.2 views

CVE-2026-24353

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through = 4.4.9...

8.1CVSS5.3AI score0.00046EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.2 views

PT-2026-4249

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through = 4.4.9...

5.4AI score0.00046EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.2 views

WordPress plugin User Registration security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS5.8AI score0.00046EPSS
Exploits0References1
NVD
NVD
added 2026/01/16 7:16 p.m.2 views

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS0.00006EPSS
Exploits0References1
OSV
OSV
added 2026/01/16 7:16 p.m.0 views

UBUNTU-CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS5.8AI score0.00006EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/16 12:0 a.m.18 views

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

2.6CVSS0.00006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:39 a.m.2 views

CVE-2022-35134

Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting XSS vulnerability...

5.4CVSS5.9AI score0.00224EPSS
Exploits1References1
Patchstack
Patchstack
added 2026/01/08 6:6 p.m.3 views

WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by Kishan Vyas in WordPress Plugin User Registration versions = 4.4.9...

8.1CVSS5.5AI score0.00046EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/10/10 11:15 p.m.2 views

UBUNTU-CVE-2025-11626

MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service...

5.5CVSS5.8AI score0.0001EPSS
Exploits0References4
OSV
OSV
added 2025/10/01 12:0 a.m.1 views

OPENSUSE-SU-2025:15591-1 jupyter-jupyterlab-4.4.9-1.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-4.4.9-1.1 package on the GA media of openSUSE Tumbleweed...

4.3CVSS5.8AI score0.00034EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/11 12:0 a.m.3 views

Fedora 41 : wireshark (2025-3545034aef)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3545034aef advisory. New version 4.4.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

7.8CVSS5.5AI score0.00031EPSS
Exploits1References2
OSV
OSV
added 2025/09/04 12:0 a.m.0 views

OPENSUSE-SU-2025:15522-1 libwireshark18-4.4.9-2.1 on GA media

These are all security issues fixed in the libwireshark18-4.4.9-2.1 package on the GA media of openSUSE Tumbleweed...

7.8CVSS5.8AI score0.00031EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:45 p.m.5 views

CVE-2022-35136

Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests...

6.5CVSS7AI score0.00247EPSS
Exploits1References1
Rows per page
Query Builder