Lucene search
K

26 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-17200

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.0016EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-34423

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00231EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/06/08 1:19 p.m.3 views

CVE-2025-30927

Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...

4.3CVSS5.9AI score0.0016EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 1:15 p.m.5 views

CVE-2025-30927

Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...

4.3CVSS0.0016EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/06 1:15 p.m.0 views

CVE-2025-30927

Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...

4.3CVSS5.9AI score0.0016EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/06/06 12:54 p.m.9 views

CVE-2025-30927 WordPress Wordapp plugin <= 1.7.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...

4.3CVSS0.0016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 12:54 p.m.3 views

CVE-2025-30927 WordPress Wordapp plugin <= 1.7.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...

4.3CVSS5.7AI score0.0016EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 12:54 p.m.37 views

CVE-2025-30927

CVE-2025-30927 (Wordapp, WordPress): Missing Authorization due to incorrectly configured access control affects Wordapp plugin versions up to 1.7.0. CVSS 3.1/4.3 (Base 4.3; Network attack vector, Low complexity, Privileges Required: Low, No user interaction; Confidentiality impact: Low). The conn...

4.3CVSS5.9AI score0.0016EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.1 views

WordPress plugin Wordapp 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS4.9AI score0.0016EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.2 views

PT-2025-24156 · Wordapp · Wordapp

Name of the Vulnerable Software and Affected Versions: Wordapp versions 1.7.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in Wordapp Team Wordapp, which allows exploiting incorrectly configured access control security levels. Recommendations: For version...

4.3CVSS4.3AI score0.0016EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 1:51 a.m.5 views

CVE-2023-2987

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wapdxopconfigset' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the...

9.8CVSS7.2AI score0.00231EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.4 views

WordPress WordApp Mobile App Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software WordApp Mobile App Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3aec8014f5d8 Credits Rafie Muhammad Patchstack...

6.8AI score
Exploits0References2Affected Software1
NVD
NVD
added 2023/05/31 3:15 a.m.8 views

CVE-2023-2987

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wapdxopconfigset' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the...

9.8CVSS9.6AI score0.00231EPSS
Exploits0References6
OSV
OSV
added 2023/05/31 3:15 a.m.2 views

CVE-2023-2987

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wapdxopconfigset' function in versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to the plugin to change the...

9.8CVSS5.8AI score0.00231EPSS
Exploits0References4
Prion
Prion
added 2023/05/31 3:15 a.m.11 views

Authorization

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wapdxopconfigset' function in versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to the plugin to change the...

7.5CVSS9.4AI score0.00231EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/05/31 2:40 a.m.14 views

CVE-2023-2987 Wordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wapdxopconfigset' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the...

9.8CVSS9.7AI score0.00231EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2023/05/31 2:40 a.m.5 views

CVE-2023-2987 Wordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wapdxopconfigset' function in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to the plugin to change the...

9.8CVSS7.2AI score0.00231EPSS
Exploits0References6
CVE
CVE
added 2023/05/31 2:40 a.m.43 views

CVE-2023-2987

The Wordapp WordPress plugin (Wordapp) is vulnerable to an authorization bypass due to an insufficiently unique cryptographic signature in the wa_pdx_op_config_set function, affecting versions up to and including 1.5.0. This allows unauthenticated attackers to modify the plugin’s validation_token...

9.8CVSS7.2AI score0.00231EPSS
Exploits0References6Affected Software1
CNNVD
CNNVD
added 2023/05/31 12:0 a.m.1 views

WordPress Plugin Wordapp 数据伪造问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.4AI score0.00231EPSS
Exploits0References6
Patchstack
Patchstack
added 2023/05/31 12:0 a.m.6 views

WordPress Wordapp Plugin <= 1.5.0 is vulnerable to Broken Access Control

Software Wordapp Type Plugin Vulnerable versions = 1.5.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-2987 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 04adbd084262 Credits Lana Codes Required privilege...

9.8CVSS6.8AI score0.00231EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder