26 matches found
CVE-2024-52475
CVE-2024-52475 WordPress Wawp Plugin = 3.0.17 is vulnerable to Broken Authentication Account takeover Disclaimer! The information provided in this document regarding for CVE-2024-52475 is for learning and educational purposes only. We do not encourage or authorize the use of this information for...
Exploit for CVE-2026-14281
LANGZ Scanner + Exploit Mass scanner + single-target Exploi...
Exploit for CVE-2026-14281
CVE-2026-14281 — WAWP Automation Web Platform Unauthenticate...
CVE-2026-14281 Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...
PT-2026-98362
Name of the Vulnerable Software and Affected Versions Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress versions prior to 4.8.7 Description An issue exists due to missing permission enforcement on the publicly accessible REST route POST...
CVE-2026-14281: Improper Privilege Management
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...
WordPress Automation Web Platform plugin <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure vulnerability
Unauthenticated Authentication Bypass via 'otptransient' Token Disclosure vulnerability discovered by RIA Labs - RIA Labs in WordPress Plugin Wawp versions = 4.8.6...
CVE-2025-62141
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...
CVE-2025-62141
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...
EUVD-2025-206041
Missing Authorization vulnerability in 101gen Wawp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through 4.0.5...
CVE-2025-62141 WordPress Wawp plugin <= 4.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in 101gen Wawp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through 4.0.5...
CVE-2025-62141 WordPress Wawp plugin <= 4.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...
CVE-2025-62141
CVE-2025-62141: In the Wawp plugin for WooCommerce, there is a missing authorization flaw affecting Wawp versions up to 4.4 (the advisory notes Wawp <= 4.4). Patch status in the Wordfence report shows the issue has been fixed, and remediation is to upgrade to the patched release (≥ 4.4). The i...
WordPress Wawp plugin <= 4.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Wawp versions = 4.4...
CVE-2025-62141: Missing Authorization
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through = 4.4...
PT-2025-54346
Name of the Vulnerable Software and Affected Versions 101gen Wawp versions through 4.0.5 Description A missing authorization issue exists in 101gen Wawp, allowing exploitation due to incorrectly configured access control security levels. Recommendations Versions prior to 4.0.5 are affected. At th...
WordPress plugin Wawp 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2024-52475
Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...
CVE-2024-52475 WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...
CVE-2024-52475 WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...