1117 matches found
CVE-2024-38783 WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4...
CVE-2024-38794 WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0...
CVE-2024-39625 WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability
Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...
CVE-2024-39625 WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability
Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...
CVE-2024-39625
CVE-2024-39625 affects the WordPress Icegram plugin (versions
CVE-2024-39650 WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities
Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4...
CVE-2024-43158
CVE-2024-43158 describes a Missing Authorization vulnerability in the WordPress plugin family Masteriyo LMS. Affected: Masteriyo LMS versions up to 1.11.4. Impact: unauthorized access to functionality constrained by ACLs, with confidentiality impact rated High and overall CVSSv3.1 base score 7.5 ...
CVE-2024-43158 WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through = 1.11.4...
CVE-2024-43159
CVE-2024-43159 is a Missing Authorization vulnerability in WordPress Masteriyo LMS plugin affecting versions up to 1.11.6. Public details describe that access to functionality is not properly constrained by ACLs, enabling unauthorized access. Available connected sources consistently state the iss...
CVE-2024-43209
CVE-2024-43209 is a Missing Authorization vulnerability in Bitly's WordPress Plugin (wp-bitly) affecting versions up to and including 2.7.2. The flaw allows access to functionality not properly constrained by ACLs. CVSS 3.1 base score 6.5 (Network, Low complexity, None privileges required, Confid...
CVE-2024-43212 WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7...
CVE-2024-43212
CVE-2024-43212 concerns the WordPress plugin WpTravelly (MagePeople Team) with a Missing Authorization vulnerability. The initial and connected documents consistently describe a Broken Access Control issue that allows accessing functionality not properly constrained by ACLs in WpTravelly versions...
CVE-2024-43219 WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Persian WooCommerce: from n/a through 7.1.6...
CVE-2024-43219
CVE-2024-43219 describes a Missing Authorization vulnerability in the Persian WooCommerce plugin for WordPress (Persian WooCommerce) affecting versions up to 7.1.6. The issue allows accessing functionality not properly constrained by ACLs, enabling privilege escalation-like access within the Pers...
CVE-2024-43290 WordPress Atarim plugin <= 4.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0.1...
CVE-2024-43323
CVE-2024-43323 concerns ReviewX for WordPress with Missing Authorization (Broken Access Control) affecting versions up to 1.6.28. The root cause is incorrectly configured access control security levels, enabling access to functionality not properly constrained. The companion PT security entry not...
CVE-2024-43343 WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12...
CVE-2024-43923 WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a through 1.0.23...
CVE-2024-43923 WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a through 1.0.23...