8 matches found
EUVD-2026-85044
The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor does it bound what that route stores, allowing unauthenticated users to write unlimited data into any user's metadata and to permanently prevent that account, including an...
WordPress Block User Account plugin < 2.0.1 - Subscriber+ Account Block Bypass via Application Passwords vulnerability
Subscriber+ Account Block Bypass via Application Passwords vulnerability discovered by Farid Narimanov in WordPress Plugin Block User Account versions 2.0.1...
EUVD-2016-7259
Malware in sbrugna...
CVE-2021-31554
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked...
CVE-2021-31554: Incorrect Authorization
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked...
CVE-2014-5268
The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link...
CVE-2014-5268: Undefined Security Weakness
The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link...
