Lucene search
+L

1594 matches found

CNNVD
CNNVD
added 2025/11/20 12:0 a.m.7 views

WordPress plugin Ultimate Member Widgets for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

5.3CVSS6.2AI score0.00233EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/19 6:15 a.m.14 views

CVE-2025-12174

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'directoristpreparelistingsexportfile' and 'directoristtypeslugchange' AJAX actions in all versions up to, and...

6.5CVSS0.00192EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/19 12:0 a.m.9 views

WordPress plugin WP Login and Register using JWT 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00195EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/19 12:0 a.m.8 views

WordPress plugin Directorist 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References3
NVD
NVD
added 2025/11/18 9:15 a.m.13 views

CVE-2025-11620

The Multiple Roles per User plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mrpuaddmultiplerolesui' and 'mrpusavemultipleuserroles' functions in all versions up to, and including, 1.0. This makes it possible for authenticated...

7.2CVSS0.00352EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/18 8:27 a.m.7 views

EUVD-2025-197949

The Multiple Roles per User plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mrpuaddmultiplerolesui' and 'mrpusavemultipleuserroles' functions in all versions up to, and including, 1.0. This makes it possible for authenticated...

7.2CVSS4.7AI score0.00352EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.6 views

PT-2025-47278

Name of the Vulnerable Software and Affected Versions BuddyPress Restrictions plugin for WordPress versions up to and including 1.5.2 Description The Restrictions for BuddyPress plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the handle opt...

5.3CVSS6AI score0.00264EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.6 views

WordPress plugin Multiple Roles per User 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

7.2CVSS6.3AI score0.00352EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.6 views

WordPress plugin Restrictions for BuddyPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

5.3CVSS6.4AI score0.00264EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.6 views

WordPress plugin ACF Flexible Layouts Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.4AI score0.00198EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.6 views

WordPress plugin Cryptocurrency Payment Gateway for WooCommerce 安全漏洞

WordPress Cryptocurrency Payment Gateway for WooCommerce plugin is a virtual currency payment collection plugin designed for WooCommerce e-commerce platform. WordPress Cryptocurrency Payment Gateway for WooCommerce plugin suffers from an unauthorized data modification vulnerability that stems fro...

5.3CVSS6.8AI score0.00266EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/11/14 12:0 a.m.8 views

WordPress Plugin Add Multiple Marker Has Unspecified Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Add Multiple Marker, which stems from a...

5.3CVSS6.5AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/13 12:15 p.m.7 views

CVE-2025-12377

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Author-leve...

4.3CVSS0.00311EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.12 views

WordPress plugin quicq 安全漏洞

WordPress quicq plugin is an image optimization tool designed for WordPress that automatically compresses and resizes images to improve website performance. A missing capability check vulnerability exists in WordPress quicq plugin, which can be exploited by attackers to cause unauthorized data...

4.3CVSS6.3AI score0.00194EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.7 views

WordPress plugin Welcart e-Commerce 安全漏洞

WordPress Welcart e-Commerce Plugin is an e-commerce plugin designed for WordPress to build and manage online stores. WordPress Welcart e-Commerce Plugin suffers from an unauthorized access vulnerability that stems from a lack of capability checking in the uscesexport operation, which can be...

5.3CVSS6.3AI score0.00233EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/11/12 3:46 a.m.8 views

CVE-2025-11999

The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capability check on the addmultiplemarkerresetmap and ammsavemapapi functions in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upda...

5.3CVSS5.3AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.5 views

WordPress plugin Booking Calendar | Appointment Booking | Bookit 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.1AI score0.00251EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/11/12 12:0 a.m.8 views

WordPress Ovatheme Events Manager plugin unauthorized access vulnerability

WordPress Ovatheme Events Manager plugin is an event management plugin for the WordPress platform that is used to create and manage event calendars, ticket sales and other features. WordPress Ovatheme Events Manager plugin suffers from an unauthorized access vulnerability that stems from a lack o...

6.5CVSS6.8AI score0.00198EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/11 12:30 p.m.10 views

EUVD-2025-84361

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "rtclajaxaddlistingtype", "rtclajaxupdatelistingtype", and "rtclajaxdeletelistingtype" function in all...

4.3CVSS4.6AI score0.00217EPSS
SaveExploits0References3
NVD
NVD
added 2025/11/11 11:15 a.m.12 views

CVE-2025-12953

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "rtclajaxaddlistingtype", "rtclajaxupdatelistingtype", and "rtclajaxdeletelistingtype" function in all...

4.3CVSS0.00217EPSS
SaveExploits0References2
Rows per page
Query Builder