Lucene search
+L

13609 matches found

OSV
OSV
added 2025/10/02 8:39 p.m.12 views

CVE-2025-61665 WeGIA: Broken Access Control in `get_relatorios_socios.php` Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the getrelatoriossocios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and...

8.7CVSS6.7AI score
SaveExploits0References4
Patchstack
Patchstack
added 2025/10/02 9:56 a.m.11 views

WordPress Jock On Air Now (JOAN) plugin <= 6.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Jock On Air Now JOAN versions = 6.0.4...

6.5CVSS7AI score0.00254EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/10/01 9:48 p.m.12 views

WordPress Custom Searchable Data Entry System plugin <= 1.7.1 - Unauthenticated Database Wiping vulnerability

Unauthenticated Database Wiping vulnerability discovered by Sean Murphy in WordPress Plugin Custom Searchable Data Entry System versions = 1.7.1...

9.1CVSS6.8AI score0.00329EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/09/30 4:01 p.m.10 views

WordPress Flights & Hotels Booking WP Plugin plugin <= 3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Flights & Hotels Booking WP Plugin versions = 3.1...

8.8CVSS7AI score0.00241EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/30 7:12 a.m.8 views

WordPress SMS Contact Form 7 Notifications by ClickSend plugin <= 1.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin SMS Contact Form 7 Notifications by ClickSend versions = 1.4.0...

8.1CVSS7AI score0.0023EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/30 5:44 a.m.10 views

WordPress Effect Maker plugin <= 1.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Effect Maker versions = 1.2.1...

6.5CVSS7AI score0.00209EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/30 12:52 a.m.13 views

WordPress SmartCrawl SEO plugin <= 3.14.3 - Missing Authorization to Plugin Settings Update vulnerability

Missing Authorization to Plugin Settings Update vulnerability discovered by Rafshanzani Suhada in WordPress Plugin SmartCrawl versions = 3.14.3...

4.3CVSS6.8AI score0.00234EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/09/29 8:47 p.m.11 views

WordPress Smart WeTransfer plugin <= 1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Smart WeTransfer versions = 1.3...

8.1CVSS7AI score0.00285EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/28 5:57 p.m.14 views

WordPress Referral Link Tracker plugin <= 1.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Referral Link Tracker versions = 1.1.4...

9.8CVSS7AI score0.00285EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/28 10:03 a.m.20 views

WordPress Ivory Search plugin <= 5.5.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Ivory Search versions = 5.5.12...

5.3CVSS7AI score0.00321EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/27 10:28 p.m.13 views

WordPress BuddyPress plugin <= 14.3.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ? in WordPress Plugin BuddyPress versions = 14.3.4...

7.5CVSS7AI score0.004EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 10:02 a.m.13 views

WordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion Vulnerability

Arbitrary Content Deletion Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Subscription Forms PRO versions = 2.0.5...

4.3CVSS6.7AI score0.00194EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 10:02 a.m.12 views

WordPress Frames Theme <= 1.5.7 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Frames versions = 1.5.7...

4.3CVSS6.9AI score0.00255EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 10:01 a.m.12 views

WordPress Nota Fiscal Eletrônica WooCommerce plugin <= 3.4.0.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Nota Fiscal Eletrônica WooCommerce versions = 3.4.0.9...

4.3CVSS6.8AI score0.00277EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 10:00 a.m.9 views

WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Virtual Assistant versions = 3.0...

5.3CVSS6.7AI score0.00273EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 9:59 a.m.12 views

WordPress Subscribe To Unlock Plugin <= 1.1.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Subscribe To Unlock versions = 1.1.5...

4.3CVSS6.8AI score0.00236EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 9:59 a.m.7 views

WordPress Subscribe to Download Plugin <= 2.0.9 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Subscribe to Download versions = 2.0.9...

4.3CVSS6.8AI score0.00236EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 9:58 a.m.10 views

WordPress Netgsm plugin <= 2.9.69 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Netgsm versions = 2.9.69...

4.3CVSS5.2AI score0.00236EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 9:56 a.m.10 views

WordPress WEDOS Global Plugin <= 1.2.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin WEDOS Global versions = 1.2.2...

5.3CVSS6.7AI score0.00273EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/26 9:55 a.m.14 views

WordPress Yext Plugin <= 1.1.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin Yext versions = 1.1.3...

5.3CVSS6.7AI score0.00273EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder