Lucene search
K

23 matches found

NVD
NVD
added 2026/04/21 7:16 a.m.1 views

CVE-2026-6703

The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticat...

4.3CVSS0.0004EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/21 6:43 a.m.26 views

CVE-2026-6703 Responsive Blocks <= 2.2.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions

The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticat...

4.3CVSS0.0004EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/04/21 6:43 a.m.1 views

CVE-2026-6703 Responsive Blocks <= 2.2.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions

The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticat...

4.3CVSS5.7AI score0.0004EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-0887

Malicious code in bioql PyPI...

9.8CVSS4.8AI score0.00292EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-29141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted...

9.8CVSS6.2AI score0.00292EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 11:1 a.m.22 views

BIT-MEDIAWIKI-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS7AI score0.00292EPSS
Exploits0References7
Debian
Debian
added 2023/08/22 11:8 p.m.34 views

[SECURITY] [DLA 3540-1] mediawiki security update

Debian LTS Advisory DLA-3540-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 23, 2023 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.31.16-1+deb10u6 CVE ID : CVE-2023-29141 An auto-block can occur for an untrusted X-Forwarded-For header in...

9.8CVSS6.1AI score0.00292EPSS
Exploits0
Mageia
Mageia
added 2023/06/28 5:21 a.m.66 views

Updated mediawiki packages fix security vulnerability

Bundled PapaParse copy in VisualEditor has known ReDos CVE-2020-36649. An issue was discovered in MediaWiki before 1.35.9. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These fil...

9.8CVSS6.5AI score0.00723EPSS
Exploits3References5
RedhatCVE
RedhatCVE
added 2023/03/31 9:43 p.m.26 views

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

5.3CVSS8.9AI score0.00292EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2023/03/31 9:30 p.m.8 views

X-Forwarded-For header allows brute-forcing autoblocked IP addresses

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS7.2AI score0.00292EPSS
Exploits0References11Affected Software1
OSV
OSV
added 2023/03/31 9:30 p.m.7 views

GHSA-5VJ8-G3QG-4QH6 X-Forwarded-For header allows brute-forcing autoblocked IP addresses

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS9.4AI score0.00292EPSS
Exploits0References11
OSV
OSV
added 2023/03/31 7:15 p.m.1 views

DEBIAN-CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS5.5AI score0.00292EPSS
Exploits0References1
NVD
NVD
added 2023/03/31 7:15 p.m.16 views

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS9.5AI score0.00292EPSS
Exploits0References6
OSV
OSV
added 2023/03/31 7:15 p.m.23 views

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS9.7AI score
Exploits0References6
Prion
Prion
added 2023/03/31 7:15 p.m.20 views

Design/Logic Flaw

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

7.5CVSS9.3AI score0.00292EPSS
Exploits0References6Affected Software2
UbuntuCve
UbuntuCve
added 2023/03/31 7:15 p.m.28 views

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS6.3AI score0.00292EPSS
Exploits0References2
OSV
OSV
added 2023/03/31 7:15 p.m.0 views

UBUNTU-CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS5.8AI score0.00292EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.2 views

PT-2023-22168 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.10 MediaWiki versions 1.36.x through 1.38.x before 1.38.6 MediaWiki versions 1.39.x before 1.39.3 Description: An issue was discovered in MediaWiki where an auto-block can occur for an untrusted X-Forwarded-Fo...

9.8CVSS6AI score0.11025EPSS
Exploits27References134
Vulnrichment
Vulnrichment
added 2023/03/31 12:0 a.m.2 views

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

7.2AI score0.00292EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2023/03/31 12:0 a.m.28 views

CVE-2023-29141

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header...

9.8CVSS4.3AI score0.00292EPSS
Exploits0
Rows per page
Query Builder