Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-4790

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00315EPSS
Exploits1References8
Cvelist
Cvelist
added 2024/08/08 5:31 a.m.18 views

CVE-2024-6824 Premium Addons for Elementor <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update

The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'checktempvalidity' and 'updatetemplatetitle' functions in all versions up to, and including, 4.10.38. This makes it possible for authenticate...

4.3CVSS0.00192EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/08/08 2:32 a.m.2 views

WordPress Premium Addons for Elementor plugin <= 4.10.38 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Content Deletion and Arbitrary Title Update vulnerability discovered by stealthcopter in WordPress Plugin Premium Addons for Elementor versions = 4.10.38...

4.3CVSS7AI score0.00192EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/06/15 8:42 a.m.20 views

CVE-2024-5858 Infographic Maker iList <= 4.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title Update

The AI Infographic Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the qcldopenaititlegeneratedesc AJAX action in all versions up to, and including, 4.7.4. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS0.00135EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/06/14 12:38 p.m.1 views

WordPress Infographic Maker iList plugin <= 4.7.4 - Authenticated Arbitrary Title Update vulnerability

Authenticated Arbitrary Title Update vulnerability discovered by Lucio Sá in WordPress Plugin Infographic Maker – iList versions = 4.7.4...

4.3CVSS7AI score0.00135EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/01/08 7:15 p.m.1 views

CVE-2023-6042

Any unauthenticated user may send e-mail from the site with any title or content to the admin...

7.5CVSS7AI score0.00384EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2023/01/09 12:0 a.m.2 views

PT-2023-13956 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons WordPress plugin versions prior to 1.3.56 Description: The issue is related to the lack of authorization and CSRF checks when creating a template. This could allow any authenticated users, such as subscribers, to...

4.3CVSS6.7AI score0.00073EPSS
Exploits1References6
Rows per page
Query Builder