CVE-2026-40777

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

EUVD-2026-96536

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

CVE-2026-40777 WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

CVE-2026-40777

The WordPress WPSection plugin (versions

PT-2026-109755

Name of the Vulnerable Software and Affected Versions WPSection versions prior to 1.5.2 Description Broken access control allows users with subscriber privileges to perform unauthorized actions. Recommendations Update to a version newer than 1.5.1...

CVE-2026-40777: Missing Authorization

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

EUVD-2024-40092

Malicious code in bioql PyPI...

CVE-2024-43165

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8...

CVE-2024-43165

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8...

CVE-2024-43165

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8...

CVE-2024-43165

CVE-2024-43165 (WPSection, Rashid87) details (mode C): The WPSection WordPress plugin suffers a Path Traversal vulnerability that enables PHP Local File Inclusion due to an improper limitation of a pathname to a restricted directory. Affected software: Rashid87 WPSection up to version 1.3.8 (auth...

CVE-2024-43165 WordPress WPSection plugin <= 1.3.8 - Contributor+ Limited Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8...

CVE-2024-43165 WordPress WPSection plugin <= 1.3.8 - Contributor+ Limited Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8...

PT-2024-30357

Name of the Vulnerable Software and Affected Versions Rashid87 WPSection versions 1.3.8 and earlier Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, which allows PHP Local File Inclusion in Rashid87...

WordPress plugin WPSection 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2024-43165: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8...

WordPress WPSection plugin <= 1.3.8 - Contributor+ Limited Local File Inclusion vulnerability

Contributor+ Limited Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin WPSection versions = 1.3.8...

WordPress WPSection Plugin <= 1.3.8 is vulnerable to Local File Inclusion

Software WPSection Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-43165 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cd0a6805dc6f Credits João Pedro S Alcântara Kinorth Required privileg...