Lucene search
+L

26 matches found

Kitploit
Kitploit
•added 2026/10/12 10:17 p.m.•27 views

CVE-2024-52475

CVE-2024-52475 WordPress Wawp Plugin = 3.0.17 is vulnerable to Broken Authentication Account takeover Disclaimer! The information provided in this document regarding for CVE-2024-52475 is for learning and educational purposes only. We do not encourage or authorize the use of this information for...

9.8CVSS8.2AI score0.01877EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/09/26 7:03 a.m.•38 views

Exploit for CVE-2026-14281

LANGZ Scanner + Exploit Mass scanner + single-target Exploi...

9.8CVSS6AI score0.00531EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2026/09/25 7:43 a.m.•45 views

Exploit for CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform Unauthenticate...

9.8CVSS6.1AI score0.00531EPSS
SaveExploits3
Vulnrichment
Vulnrichment
•added 2026/09/25 6:39 a.m.•21 views

CVE-2026-14281 Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

9.8CVSS5.8AI score0.00531EPSS
SaveExploits3References14
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•8 views

PT-2026-98362

Name of the Vulnerable Software and Affected Versions Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress versions prior to 4.8.7 Description An issue exists due to missing permission enforcement on the publicly accessible REST route POST...

9.8CVSS5.7AI score0.00531EPSS
SaveExploits3References26
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•16 views

CVE-2026-14281: Improper Privilege Management

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

9.8CVSS5.8AI score0.00531EPSS
SaveExploits3References2
Patchstack
Patchstack
•added 2026/08/21 10:20 a.m.•22 views

WordPress Automation Web Platform plugin <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure vulnerability

Unauthenticated Authentication Bypass via 'otptransient' Token Disclosure vulnerability discovered by RIA Labs - RIA Labs in WordPress Plugin Wawp versions = 4.8.6...

9.8CVSS5.2AI score0.00707EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/01 3:32 p.m.•26 views

CVE-2025-62141

Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...

5.3CVSS5.9AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/31 3:15 p.m.•42 views

CVE-2025-62141

Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...

5.3CVSS0.00227EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:07 p.m.•21 views

EUVD-2025-206041

Missing Authorization vulnerability in 101gen Wawp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through 4.0.5...

5.3CVSS6.5AI score0.00227EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 3:07 p.m.•12 views

CVE-2025-62141 WordPress Wawp plugin <= 4.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in 101gen Wawp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through 4.0.5...

5.3CVSS6AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 3:07 p.m.•46 views

CVE-2025-62141 WordPress Wawp plugin <= 4.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...

5.3CVSS0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 3:07 p.m.•47 views

CVE-2025-62141

CVE-2025-62141: In the Wawp plugin for WooCommerce, there is a missing authorization flaw affecting Wawp versions up to 4.4 (the advisory notes Wawp &lt;= 4.4). Patch status in the Wordfence report shows the issue has been fixed, and remediation is to upgrade to the patched release (≥ 4.4). The i...

5.3CVSS6AI score0.00227EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 3:04 p.m.•26 views

WordPress Wawp plugin <= 4.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Wawp versions = 4.4...

5.3CVSS7AI score0.00227EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•7 views

CVE-2025-62141: Missing Authorization

Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...

5.3CVSS6AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•27 views

PT-2025-54346

Name of the Vulnerable Software and Affected Versions 101gen Wawp versions through 4.0.5 Description A missing authorization issue exists in 101gen Wawp, allowing exploitation due to incorrectly configured access control security levels. Recommendations Versions prior to 4.0.5 are affected. At th...

5.3CVSS6.3AI score0.00227EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•17 views

WordPress plugin Wawp 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/28 11:15 a.m.•38 views

CVE-2024-52475

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...

9.8CVSS0.01877EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/28 10:34 a.m.•14 views

CVE-2024-52475 WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...

9.8CVSS7.2AI score0.01877EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/28 10:34 a.m.•245 views

CVE-2024-52475 WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...

9.8CVSS0.01877EPSS
SaveExploits0References1
Rows per page
Query Builder