19 matches found
CVE-2024-52475
CVE-2024-52475 WordPress Wawp プラグイン = 3.0.17 は認証バイパス(アカウント乗っ取り)に対して脆弱です 免責事項! この文書で提供される CVE-2024-52475 に関する情報は、学習および教育目的のみです。我々は、この情報を悪用、システム改ざん、その他の違法行為を含む有害な目的に使用することを推奨したり承認したりしません。 セキュリティ脆弱性の探求と理解において倫理の重要性を強調します。この情報の使用は責任を持って、適用される法律に従って行ってください。この情報を使用して行われるすべての行為はユーザーの単独責任です。...
WordPress Automation Web Platform plugin <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure vulnerability
Unauthenticated Authentication Bypass via 'otptransient' Token Disclosure vulnerability discovered by RIA Labs - RIA Labs in WordPress Plugin Wawp versions = 4.8.6...
CVE-2025-62141
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...
CVE-2025-62141
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...
CVE-2025-62141 WordPress Wawp plugin <= 4.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in 101gen Wawp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through 4.0.5...
CVE-2025-62141 WordPress Wawp plugin <= 4.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...
CVE-2025-62141
CVE-2025-62141: In the Wawp plugin for WooCommerce, there is a missing authorization flaw affecting Wawp versions up to 4.4 (the advisory notes Wawp <= 4.4). Patch status in the Wordfence report shows the issue has been fixed, and remediation is to upgrade to the patched release (≥ 4.4). The i...
EUVD-2025-206041
Missing Authorization vulnerability in 101gen Wawp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through 4.0.5...
WordPress Wawp plugin <= 4.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Wawp versions = 4.4...
PT-2025-54346
Name of the Vulnerable Software and Affected Versions 101gen Wawp versions through 4.0.5 Description A missing authorization issue exists in 101gen Wawp, allowing exploitation due to incorrectly configured access control security levels. Recommendations Versions prior to 4.0.5 are affected. At th...
WordPress plugin Wawp 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2024-52475
Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...
CVE-2024-52475 WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...
CVE-2024-52475 WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...
CVE-2024-52475
CVE-2024-52475 refers to the WordPress Wawp plugin (
WordPress plugin Wawp 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-35315 · Unknown · Automation Web Platform Wawp
Name of the Vulnerable Software and Affected Versions: Automation Web Platform Wawp versions prior to 3.0.18 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in the Automation Web Platform Wawp. This vulnerability allows authentication...
WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability
Account Takeover vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Wawp versions 3.0.18...
WordPress Wawp Plugin < 3.0.18 is vulnerable to Broken Authentication
Software Wawp Type Plugin Vulnerable versions 3.0.18 Fixed in 3.0.18 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-52475 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 4c22e2281ddc Credits stealthcopter...