Lucene search
+L

136 matches found

CNNVD
CNNVD
added 2025/01/25 12:00 a.m.11 views

WordPress plugin WPBookit 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

9.8CVSS9.1AI score0.0108EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/09 8:15 p.m.17 views

CVE-2024-10215

The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.6.4. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for...

9.8CVSS0.00665EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/09 8:15 p.m.9 views

CVE-2024-10215

The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.6.4. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for...

9.8CVSS5.8AI score0.00665EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/09 7:21 p.m.24 views

CVE-2024-10215 WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change

The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.6.4. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for...

9.8CVSS0.00665EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/09 7:21 p.m.66 views

CVE-2024-10215

The CVE-2024-10215 entry concerns the WPBookit WordPress plugin (versions up to and including 1.6.4). The root cause is that the plugin exposes user-controlled access to objects, allowing unauthorized users to bypass authorization and change passwords. The practical impact is that unauthenticated...

9.8CVSS9.4AI score0.00665EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/09 7:21 p.m.13 views

CVE-2024-10215 WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change

The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.6.4. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for...

9.8CVSS7.1AI score0.00665EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/09 8:02 a.m.12 views

WordPress WPBookit plugin <= 1.6.4 - Unauthenticated Arbitrary User Password Change vulnerability

Unauthenticated Arbitrary User Password Change vulnerability discovered by István Márton in WordPress Plugin WPBookit versions = 1.6.4...

9.8CVSS7AI score0.00665EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.10 views

WordPress plugin WPBookit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.5AI score0.00665EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.7 views

PT-2025-1579 · WordPress · Wpbookit

Name of the Vulnerable Software and Affected Versions: WPBookit plugin for WordPress versions up to, and including, 1.6.4 Description: The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change. This is due to the plugin providing user-controlled access to objects, letting ...

9.8CVSS9.4AI score0.00665EPSS
SaveExploits0References8
NVD
NVD
added 2024/12/16 4:15 p.m.24 views

CVE-2024-54280

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Iqonic Design WPBookit wpbookit allows SQL Injection.This issue affects WPBookit: from n/a through = 1.6.0...

9.8CVSS0.00609EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/16 3:43 p.m.16 views

CVE-2024-54280 WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Iqonic Design WPBookit allows SQL Injection.This issue affects WPBookit: from n/a through 1.6.0...

9.3CVSS7.9AI score0.00609EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/16 3:43 p.m.38 views

CVE-2024-54280 WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Iqonic Design WPBookit wpbookit allows SQL Injection.This issue affects WPBookit: from n/a through = 1.6.0...

9.3CVSS0.00609EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/16 3:43 p.m.52 views

CVE-2024-54280

CVE-2024-54280 is an Unauthenticated SQL Injection affecting WPBookit (Iqonic Design) for WordPress, with affected versions from n/a up to 1.6.0. The vulnerability is due to improper neutralization of special elements in SQL queries. The connected Red Hat entry reiterates the same CVE and descrip...

9.8CVSS7.3AI score0.00609EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.7 views

PT-2024-36162 · Iqonic Design · Wpbookit

Name of the Vulnerable Software and Affected Versions: Iqonic Design WPBookit versions 1.6.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...

9.8CVSS8AI score0.00609EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.10 views

WordPress plugin WPBookit SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.8CVSS9.1AI score0.00609EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/11 4:46 p.m.9 views

WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ngô Thái An Patchstack Alliance in WordPress Plugin WPBookit versions = 1.6.0...

9.8CVSS8.1AI score0.00609EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder