Lucene search
+L

7 matches found

OSV
OSV
•added 2025/02/01 4:15 a.m.•20 views

CVE-2024-13651

The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxdeactivate function in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with...

4.3CVSS7.3AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/01 12:00 a.m.•4 views

PT-2025-2235

Name of the Vulnerable Software and Affected Versions The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress versions up to, and including, 2.4.4 Description The issue allows authenticated attackers with Subscriber-level access and above to reset some of the plugin's settings due ...

4.3CVSS0.00291EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/02/01 12:00 a.m.•22 views

WordPress plugin RapidLoad 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS8.6AI score0.00291EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/10 8:15 p.m.•19 views

CVE-2023-1336

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the ajaxdeactivate function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to...

4.3CVSS6.6AI score0.00548EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/03/10 7:19 p.m.•45 views

CVE-2023-1336 RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ajax_deactivate'

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the ajaxdeactivate function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to...

4.3CVSS4.6AI score0.00548EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/10 12:00 a.m.•17 views

WordPress plugin RapidLoad Power-Up for Autoptimize 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A cross-site request forgery vulnerability...

4.3CVSS6.2AI score0.00307EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/10 12:00 a.m.•18 views

WordPress plugin RapidLoad Power-Up for Autoptimize 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.3CVSS6.4AI score0.00548EPSS
SaveExploits0References3
Rows per page
Query Builder