Lucene search
+L

191 matches found

Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.22 views

PT-2025-5411 · Atarim · Atarim

Name of the Vulnerable Software and Affected Versions: Atarim versions n/a through 4.0.8 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can inject malicious scripts into the...

7.1CVSS6.3AI score0.00411EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/21 10:15 a.m.35 views

CVE-2024-12104

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfdeletefile and wpfdeletefile functions in all versions up to, and including, 4.0.9. This makes it possible for...

7.5CVSS0.00349EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/21 10:15 a.m.8 views

CVE-2024-12104

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfdeletefile and wpfdeletefile functions in all versions up to, and including, 4.0.9. This makes it possible for...

7.5CVSS7.3AI score0.00349EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/21 9:21 a.m.65 views

CVE-2024-12104

CVE-2024-12104 documents a vulnerability in Visual Website Collaboration, Feedback & Project Management – Atarim (WordPress) where all versions up to 4.0.9 lack a required capability check on wpf_delete_file and wpf_delete_file functions. This permits unauthenticated attackers to delete project p...

7.5CVSS7.1AI score0.00349EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/21 9:21 a.m.10 views

CVE-2024-12104 Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfdeletefile and wpfdeletefile functions in all versions up to, and including, 4.0.9. This makes it possible for...

5.3CVSS7.1AI score0.00349EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/21 9:21 a.m.37 views

CVE-2024-12104 Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfdeletefile and wpfdeletefile functions in all versions up to, and including, 4.0.9. This makes it possible for...

5.3CVSS0.00349EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/21 12:00 a.m.9 views

WordPress plugin Atarim 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS8.1AI score0.00349EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/01 3:15 p.m.24 views

CVE-2024-43290

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0.1...

5.3CVSS0.00381EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.12 views

CVE-2024-38771

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0...

6.5CVSS0.00437EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.22 views

CVE-2024-38771 WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0...

6.5CVSS0.00437EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.46 views

CVE-2024-38771

CVE-2024-38771 affects WordPress Atarim Visual Collaboration (plugin likely

6.5CVSS5.9AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.12 views

CVE-2024-38771 WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Atarim allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Atarim: from n/a through 4.0...

6.5CVSS6.5AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.13 views

CVE-2024-43290 WordPress Atarim plugin <= 4.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0.1...

5.3CVSS5.2AI score0.00381EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.50 views

CVE-2024-43290

CVE-2024-43290 (WordPress Atarim Visual Collaboration) is a Missing Authorization vulnerability in Atarim affecting versions up to 4.0.1. The issue allows functionality to be accessed without proper ACL constraints. Public details in the initial document indicate affected software as Atarim from ...

5.3CVSS5.9AI score0.00381EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.33 views

CVE-2024-43290 WordPress Atarim plugin <= 4.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0.1...

5.3CVSS0.00381EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.13 views

PT-2024-30456 · Atarim · Atarim

Name of the Vulnerable Software and Affected Versions: Atarim versions prior to 4.0.1 Description: The issue is related to missing authorization, allowing access to functionality not properly constrained by Access Control Lists ACLs. This means that certain features or resources can be accessed...

5.3CVSS6.5AI score0.00381EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.9 views

WordPress plugin Atarim 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00381EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.8 views

WordPress plugin Atarim 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.6AI score0.00437EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.8 views

PT-2024-28207 · Atarim · Atarim

Name of the Vulnerable Software and Affected Versions: Atarim versions n/a through 4.0 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through 4.0, update to a...

6.5CVSS6.5AI score0.00437EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/08/16 11:16 a.m.9 views

WordPress Atarim plugin <= 4.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Atarim versions = 4.0.1...

5.3CVSS7AI score0.00381EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder