3210 matches found
CVE-2024-4222 Tutor LMS Pro <= 2.7.0 - Missing Authorization
The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to add, modify, or dele...
Cyber Power Systems PowerPanel 授权问题漏洞
Cyber Power Systems PowerPanel Enterprise is a software from Cyber Power Systems designed to provide real-time PUE, PUE trends, and total energy usage trends. An authorization issue vulnerability exists in Cyber Power Systems PowerPanel version 4.9.0 and prior versions, which arises from improper...
SAP Enable Now Manager 安全漏洞
SAP Enable Now Manager is the central content management and collaboration platform from SAP. An authorization issue vulnerability exists in SAP Enable Now Manager, which stems from a failure to perform the required authorization checks on authenticated users, and can be exploited by an attacker ...
SAP My Travel Requests 安全漏洞
SAP My Travel Requests is a transactional application from SAP, USA. An authorization issue vulnerability exists in SAP My Travel Requests, which stems from a failure to perform the required authorization checks on authenticated users, and can be exploited by an attacker to cause an escalation of...
GitHub: Access body and title of Internal Repo Issues in Projects
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed read access to issue content via GitHub Projects. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and...
CVE-2022-40218 WordPress TH Advance Product Search plugin <= 1.1.4 - Unauthenticated Plugin Settings Change vulnerability
Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.1.4...
PT-2024-29873 · Arconix +1 · Arconix Faq +2
Name of the Vulnerable Software and Affected Versions: Print Invoice & Delivery Notes for WooCommerce versions 4.8.1 and earlier Arconix Shortcodes versions 2.1.10 and earlier Arconix FAQ versions 1.9.3 and earlier Description: The issue is related to a Missing Authorization vulnerability. This...
WordPress plugin Advance WordPress Search Plugin 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-20871
Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...
CVE-2024-20871
Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...
CVE-2024-20871
Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection...
WordPress plugin WP Post Author 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-33931
Missing Authorization vulnerability in ilGhera JW Player for WordPress.This issue affects JW Player for WordPress: from n/a through 2.3.3...
CVE-2024-33914
Missing Authorization vulnerability in Exclusive Addons Exclusive Addons Elementor.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.1...
WordPress ShopLentor (formerly WooLentor) plugin <= 2.8.7 - Missing Authorization via purchased_new_products vulnerability
Missing Authorization via purchasednewproducts vulnerability discovered by Francesco Carlucci in WordPress Plugin ShopLentor versions = 2.8.7...
WordPress plugin iPanorama 360 WordPress Virtual Tour Builder 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-33944 WordPress WooCommerce AWeber Newsletter Subscription plugin <= 4.0.2 - Unauthenticated Access Token Change/Reset vulnerability
Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2...
WordPress The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin <= 7.6.1 - Missing Authorization vulnerability
Missing Authorization vulnerability discovered by Pavel Palii in WordPress Plugin The Post Grid versions = 7.6.1...
WordPress Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin <= 5.2.3 - Missing Authorization vulnerability
Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin Analytify versions = 5.2.3...