CVE-2024-54381 WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through = 3.1.1...

CVE-2024-54381

CVE-2024-54381 affects the WordPress plugin Advance Menu Manager (affected: v1.x and below; from n/a through 3.1.1). The issue is a Missing Authorization vulnerability that could allow an unauthenticated actor to perform a settings-change operation on the plugin. The Red Hat and Wordfence entries...

CVE-2024-52485 WordPress WP Menu Image plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Yudiz Solutions Ltd. WP Menu Image wp-menu-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Menu Image: from n/a through = 2.2...

CVE-2024-52485

CVE-2024-52485 describes a Missing Authorization vulnerability in the WordPress plugin WP Menu Image (versions through 2.2). The root cause is “broken access control,” permitting exploitation due to incorrectly configured access security levels. Documented impact indicates unauthorized access rel...

Elasticsearch Incorrect Authorization vulnerability

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow...

CVE-2024-54417

Missing Authorization vulnerability in pixelgrade PixProof pixproof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through = 2.0.1...

CVE-2024-54354 WordPress Termin-Kalender plugin <= 0.99.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in beat.k Termin-Kalender termin-kalender allows Stored XSS.This issue affects Termin-Kalender: from n/a through = 0.99.47...

CVE-2024-54369 WordPress Zita Site Builder plugin <= 1.0.2 - Arbitrary Plugin Installation and Activation vulnerability

Missing Authorization vulnerability in ThemeHunk Zita Site Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Zita Site Builder: from n/a through 1.0.2...

CVE-2024-54379 WordPress Minterpress plugin <= 1.0.5 - Arbitrary Option Update to Privilege Escalation vulnerability

Missing Authorization vulnerability in blokhauswp Minterpress minterpress allows Privilege Escalation.This issue affects Minterpress: from n/a through = 1.0.5...

CVE-2024-55993

CVE-2024-55993 is a Missing Authorization vulnerability in the WordPress plugin Job Board Manager (PickPlugins). Public details confirm affected software: Job Board Manager versions ≤ 2.1.60. The Red Hat and Wordfence entries describe the issue as an authorization/configuration flaw allowing acce...

CVE-2024-55994 WordPress 畅言评论系统 plugin <= 2.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in sohu 畅言评论系统 changyan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 畅言评论系统: from n/a through = 2.0.5...

CVE-2024-55994 WordPress 畅言评论系统 plugin <= 2.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in sohu 畅言评论系统 changyan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 畅言评论系统: from n/a through = 2.0.5...

CVE-2024-54402

CVE-2024-54402: Missing Authorization vulnerability in Jozoor Arabic Webfonts (Arabic Webfonts) allowing access control bypass due to incorrectly configured access control. Affected versions: Arabic Webfonts up to and including 1.4.6. CVSS v3.1 base score 4.3 (Network, Low privileges required, No...

CVE-2024-56004 WordPress Easy Site Importer plugin <= 1.0.1 - Settings Change vulnerability

Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through = 1.0.1...

WordPress plugin Popup Surveys & Polls for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-54242

Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through = 1.3...

CVE-2023-41870

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5...

CVE-2023-41849

Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0...

CVE-2023-41683

Missing Authorization vulnerability in Pechenki TelSender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TelSender: from n/a through 1.14.11...

CVE-2023-41664

Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4...