CVE-2022-1625

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes for bypassing the provided restrictions and to change plugin settings by tricking admin users into visitin...

CVE-2025-4457

A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has be...

Configuration Change Detected (Low)

The system detected a change in the controller code that was made via the network. An attacker may use code changes to disrupt normal operations, to cause production losses, or to create a security threat. This plugin only works with Tenable.ot. Please visit...

CVE-2025-3171

A vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0. This vulnerability affects unknown code of the file /approvelawyer.php. The manipulation of the argument unblockid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-3171 Project Worlds Online Lawyer Management System approve_lawyer.php sql injection

A vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0. This vulnerability affects unknown code of the file /approvelawyer.php. The manipulation of the argument unblockid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-1191

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/approve-reject.php. The manipulation of the argument brejectid leads to sql injection. The attack may be initiate...

SourceCodester Multi Restaurant Table Reservation System 注入漏洞

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system from SourceCodester, Inc. An injection vulnerability exists in SourceCodester Multi Restaurant Table Reservation System version 1.0, which originates from an SQL injection vulnerability contain...

PT-2025-6838 · Sourcecodester · Sourcecodester Multi Restaurant Table Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Multi Restaurant Table Reservation System version 1.0 Description: A critical issue affects some unknown processing of the file /dashboard/approve-reject.php. The manipulation of the argument breject id leads to SQL injection...

CVE-2025-0874

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

PT-2025-4083 · Code Projects · Code-Projects Simple Plugins Car Rental Management

Name of the Vulnerable Software and Affected Versions: code-projects Simple Plugins Car Rental Management version 1.0 Description: A critical issue has been found in the file "/admin/approve.php", where the manipulation of the id argument leads to SQL injection. The attack can be launched remotel...

PT-2024-17584 · WordPress · The Marketking — Ultimate Woocommerce Multivendor Marketplace Solution

Name of the Vulnerable Software and Affected Versions: The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress versions up to, and including, 2.0.00 Description: The issue is related to missing capability checks on several functions, including marketking delete...

CVE-2024-54323

Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through = 2.6.2...

CVE-2024-54323

CVE-2024-54323 affects the WordPress plugin New User Approve (WPExpertsio) with builds up to 2.6.2. The Connected documents confirm a Missing Authorization vulnerability in the plugin’s access control, enabling an actor without proper privileges to influence the New User Approve workflow. Public ...

CVE-2024-54323 WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through = 2.6.2...

CVE-2024-54323 WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExpertsio New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through 2.6.2...

WordPress plugin New User Approve 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-36206 · WordPress · Wpexpertsio New User Approve

Name of the Vulnerable Software and Affected Versions: WPExpertsio New User Approve versions 2.6.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WPExpertsi...

WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin New User Approve versions = 2.6.2...

NETGEAR XR300 安全漏洞

The NETGEAR XR300 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR XR300 v1.0.3.78, which originates from the addName%d parameter in the usbapprove.cgi component that fails to correctly validate the length of the input data, and can be exploited by a remote...

CVE-2024-51016

Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usbapprove.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...