CVE-2024-32675

CVE-2024-32675 represents a Missing Authorization vulnerability in the Order Limit for WooCommerce plugin (wc-order-limit-lite). Affected versions are reported as up to 2.0.0. The connected Red Hat/Wordfence entries confirm the CVE ID and indicate the issue concerns missing authorization, but do ...

WordPress Send PDF for Contact Form 7 plugin <= 1.0.2.3 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Krzysztof Zając in WordPress Plugin Send PDF for Contact Form 7 versions = 1.0.2.3...

WordPress plugin Checkout Mestres do WP for WooCommerce has a licensing issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Checkout Mestres d...

WordPress plugin Checkout Mestres do WP for WooCommerce has a licensing issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Checkout Mestres d...

CVE-2024-32679

Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through = 1.7.16...

CVE-2024-32691

Missing Authorization vulnerability in realmag777 Active Products Tables for WooCommerce.This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.2...

CVE-2023-49742

CVE-2023-49742 (Missing Authorization) affects the WordPress plugin/support system named Support Genix Lite, with the Red Hat advisory and CVE entry indicating a missing-authorization vulnerability in Support Genix that could affect versions up to 1.2.3. The CVE entry in NVD also notes this issue...

SSSD Authorization Vulnerability

SSSD is a daemon that provides access to local or remote identity and authentication resources. SSSD suffers from an authorization issue vulnerability that stems from the presence of a contention condition in sssd that results in incorrect authorization when a GPO policy is not applied to an...

WordPress Plugin Popup Anything security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

CVE-2024-32518 WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0...

WordPress Plugin Honeypot for WP Comment security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

WordPress Plugin JVM Gutenberg Rich Text Icons Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress WP Radio plugin <= 3.1.9 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin WP Radio – Worldwide Online Radio Stations Directory for WordPress versions = 3.1.9...

WordPress Plugin WP Media Folder security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in...

WordPress Plugin ShortPixel Adaptive Images has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress Plugin...

TOTOLINK EX200 getEasyWizardCfg Method Authorization Issue Vulnerability

TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from an authorization issue vulnerability, which can be exploited ...

CVE-2024-31367 WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2...

WordPress Plugin Soledad security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress...

Esri Portal For ArcGIS Authorization Issue Vulnerability

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An authorization issue vulnerability exists in Esri Portal For ArcGIS that stems from the presence of incorrect authentication...

PT-2024-2560 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar versions 2.7.1 through 2.10.6 Apache Pulsar versions 2.11.0 through 2.11.4 Apache Pulsar versions 3.0.0 through 3.0.3 Apache Pulsar versions 3.1.0 through 3.1.3 Apache Pulsar versions 3.2.0 through 3.2.1 Description: The issue i...