82 matches found
By-Poloss..-..CVE-2026-11551-PoC
CVE-2026-11551: Branda プラグイン - アカウント乗っ取りによる未認証の権限昇格 概要 CVE ID : CVE-2026-11551 CVSS スコア : 9.8 緊急 影響を受けるバージョン : Branda – White Label & Branding = 3.4.29 修正済みバージョン : 3.4.31 公開日 : 2026年6月19日 脆弱性の説明 WordPress 用 Branda プラグインは、バージョン 3.4.29...
Branda WordPress plugin - Privilege Escalation
Branda WordPress plugin = 3.4.24 contains a privilege escalation caused by improper user identity validation in password update functionality, letting unauthenticated attackers change arbitrary user passwords, including administrators, exploit requires crafted request. id: CVE-2025-14998 info:...
CVE-2026-11551-PoC
CVE-2026-11551 - White Label & Branding, Free Login Page Customizer에서의 인증되지 않은 권한 상승 White Label & Branding, Free Login Page Customizer update $wpdb-users, $data, ... ← Line 2515: DOUBLE HASH TERSIMPAN 취약한 코드 inc/modules/login-screen/signup-password.php:230-251 / BRANDA - signup-password.php...
CVE-2025-14998
Wordpress Branda – 화이트 라벨 및 브랜딩, 무료 로그인 페이지 커스터마이저 getrow $wpdb-prepare "SELECT FROM $wpdb-signups WHERE activationkey = '%s'", $key ; if ! empty $signup || $signup-active $meta = maybeunserialize $signup-meta ; if ! empty $meta'password' if 'yes' === $signuppassworduseencryption...
CVE-2026-102376
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
CVE-2026-102376 WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
CVE-2026-102376 WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
EUVD-2026-90222
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
CVE-2026-102376
The WordPress Branda plugin is affected by a Cross Site Scripting (XSS) vulnerability in versions
WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Branda versions = 3.4.32...
CVE-2026-102376: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
2026-11551
2026-11551 CVE-2026-11551: Branda Plugin - 인증되지 않은 계정 탈취를 통한 권한 상승...
WordPress Branda - White Label & Branding, Free Login Page Customizer plugin <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover vulnerability
WordPress Branda - White Label & Branding, Free Login Page Customizer plugin = 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by thevietronin - GalaxyOne in WordPress Plugin Branda versions = 3.4.29...
EUVD-2026-38097
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551: Weak Password Recovery Mechanism for Forgotten Password
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551 Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551 Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
CVE-2026-11551
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...