Lucene search
K

44 matches found

Patchstack
Patchstack
added 2025/12/15 1:30 p.m.6 views

WordPress Wbcom Designs plugin <= 2.1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin Wbcom Designs versions = 2.1.1...

5.3CVSS7AI score0.00038EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/10 2:23 p.m.3 views

CVE-2025-67582

Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wbcom Designs: from n/a through = 2.1.1...

5.3CVSS7AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.3 views

EUVD-2025-202071

Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wbcom Designs: from n/a through = 2.1.1...

5.3CVSS6.5AI score0.00038EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 2:14 p.m.3 views

CVE-2025-67582 WordPress Wbcom Designs plugin <= 2.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wbcom Designs: from n/a through = 2.1.1...

5.3CVSS6.6AI score0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:14 p.m.8 views

CVE-2025-67582

CVE-2025-67582 affects Wbcom Designs – Private Community for BuddyPress (Wbcom Designs) and is caused by Missing Authorization in lock-my-bp. The Wordfence vulnerability listing confirms the affected range up to version 2.1.1 and notes a Patched status, indicating a fix has been released. The CVS...

5.3CVSS6.6AI score0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:14 p.m.26 views

CVE-2025-67582 WordPress Wbcom Designs plugin <= 2.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wbcom Designs: from n/a through = 2.1.1...

5.3CVSS0.00038EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.3 views

WordPress plugin Wbcom Designs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-32337

Malicious code in bioql PyPI...

8.8CVSS9.2AI score0.00051EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-13788

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00191EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-34396

Malicious code in bioql PyPI...

6.5CVSS5.6AI score0.00671EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 6:25 a.m.2 views

CVE-2024-5489

The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfudeletecustomfont' function in all versions up to, and including, 2.3.4. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS6.5AI score0.00131EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:1 a.m.1 views

CVE-2023-28694

Cross-Site Request Forgery CSRF vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin = 3.5.0 versions...

8.8CVSS6.9AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:59 a.m.3 views

CVE-2022-2108

The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and review modification due to missing capability checks and improper nonce checks in several functions related to said actions in versions up to, and including, 2.8.3. This makes it...

6.5CVSS6.7AI score0.00671EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/09 3:26 p.m.6 views

CVE-2025-47548

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...

9.8CVSS7.2AI score0.00191EPSS
Exploits0References1
OSV
OSV
added 2025/05/07 3:16 p.m.1 views

CVE-2025-47548

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress allows Server Side Request Forgery. This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through 1.4.4...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.5 views

CVE-2025-47548

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...

9.8CVSS0.00191EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 2:20 p.m.49 views

CVE-2025-47548

The CVE-2025-47548 refers to an unauthenticated SSRF vulnerability in Wbcom Designs – Activity Link Preview For BuddyPress (WordPress plugin) up to version 1.4.4. Connected sources confirm the issue is Server-Side Request Forgery and affect the BuddyPress Activity Link Preview plugin, with Patchs...

9.8CVSS7.2AI score0.00191EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/07 2:20 p.m.13 views

CVE-2025-47548 WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...

5.4CVSS0.00191EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:20 p.m.6 views

CVE-2025-47548 WordPress Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress allows Server Side Request Forgery. This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through 1.4.4...

5.4CVSS5.5AI score0.00191EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/07 12:41 p.m.4 views

WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin = 1.4.4 - Server Side Request Forgery SSRF Vulnerability discovered by HLog in WordPress Plugin Wbcom Designs - Activity Link Preview For BuddyPress versions = 1.4.4...

9.8CVSS8.2AI score0.00191EPSS
Exploits0Affected Software1
Rows per page
Query Builder