Lucene search
+L

415 matches found

RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.9 views

CVE-2026-24598

Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multilanguage by BestWebSoft: from n/a through = 1.5.2...

4.3CVSS5.4AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.12 views

CVE-2026-24598

Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multilanguage by BestWebSoft: from n/a through = 1.5.2...

4.3CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.20 views

CVE-2026-24598

CVE-2026-24598 : The WordPress plugin Multilanguage by BestWebSoft (versions through 1.5.2) contains a Missing Authorization (Broken Access Control) vulnerability. Public documents (NVD, Red Hat, CVE list, PatchStack) confirm affected software and the issue class, but do not provide exploit detai...

4.3CVSS5.4AI score0.00265EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.37 views

CVE-2026-24598 WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multilanguage by BestWebSoft: from n/a through = 1.5.2...

4.3CVSS0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.3 views

CVE-2026-24598 WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multilanguage by BestWebSoft: from n/a through = 1.5.2...

4.3CVSS5.4AI score0.00265EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.4 views

CVE-2026-24598

Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multilanguage by BestWebSoft: from n/a through = 1.5.2...

4.3CVSS5.9AI score0.00265EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/23 12:00 a.m.15 views

PT-2026-4432

Name of the Vulnerable Software and Affected Versions bestwebsoft Multilanguage by BestWebSoft versions through 1.5.2 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. Recommendations Update bestwebsoft Multilanguage ...

4.3CVSS5.3AI score0.00265EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.14 views

WordPress plugin Multilanguage by BestWebSoft has security vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00265EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/15 6:18 a.m.11 views

WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Multilanguage by BestWebSoft versions = 1.5.2...

4.3CVSS5.4AI score0.00265EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:00 a.m.8 views

CVE-2023-29096

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a throug...

8.8CVSS8.8AI score0.00706EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:12 a.m.17 views

CVE-2024-2200

The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrmcontactsubject’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS6.4AI score0.00495EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.8 views

CVE-2025-63056

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through = 4.3.6...

4.3CVSS5.9AI score0.0029EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.10 views

EUVD-2025-201973

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through = 4.3.5...

4.3CVSS6.5AI score0.0029EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.8 views

CVE-2025-63056

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through = 4.3.6...

4.3CVSS0.0029EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.20 views

CVE-2025-63056

CVE-2025-63056 corresponds to a Missing Authorization flaw in the WordPress plugin Contact Form by BestWebSoft (versions up to and including 4.3.5). The issue is a bypass of access controls in the plugin’s configuration, enabling unauthorized access as described in the CVE entry. Public sources i...

4.3CVSS5.9AI score0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:52 p.m.33 views

CVE-2025-63056 WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through = 4.3.6...

4.3CVSS0.0029EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.3 views

CVE-2025-63056 WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through = 4.3.6...

4.3CVSS5.1AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.16 views

PT-2025-50056

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through = 4.3.5...

7AI score0.0029EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.10 views

WordPress plugin Contact Form by BestWebSoft 安全漏洞

...

4.3CVSS5.8AI score0.0029EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/07 4:15 p.m.11 views

WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Contact Form by BestWebSoft versions = 4.3.6...

4.3CVSS6.8AI score0.0029EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder