CVE-2024-10586-Poc

Informations sur la vulnérabilité Description Le plugin Debug Tool pour WordPress est vulnérable à la création arbitraire de fichiers en raison d'un manque de vérification des capacités sur la fonction dbtpullimage et d'un manque de validation du type de fichier dans toutes les versions jusqu'à l...

CVE-2024-54369

CVE-2024-54369 Zita Site Builder = 1.0.2 - Absence d'autorisation menant à l'installation arbitraire de plugins Description Le plugin Zita Site Builder pour WordPress est vulnérable à un accès non autorisé à une fonctionnalité en raison d'un manque de vérification des capacités sur l'une de ses...

CVE-2024-0679

CVE-2024-0679 ColorMag = 3.1.2 - Autorisation manquante pour l'installation/activation arbitraire de plugins par des utilisateurs authentifiés Abonné+ Description: Le thème ColorMag pour WordPress est vulnérable à un accès non autorisé en raison d'une vérification de capacité manquante dans la...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – Assistant de rédaction de contenu AI = 1.0.18 - Absence d'autorisation permettant l'installation/activation arbitraire de plugin pour utilisateurs authentifiés Abonné+ Description Le plugin 10Web AI Assistant – Assistant de rédaction de contenu AI pour WordPress...

CVE-2025-5701

CVE-2025-5701 - Эксплойт повышения привилегий без аутентификации Критичность: КРИТИЧЕСКАЯ CVSS 9.8 Затронутый плагин: HyperComments для WordPress Затронутые версии: ≤ 1.2.2 📌 Сводка об уязвимости Плагин HyperComments для WordPress уязвим к несанкционированному изменению опций WordPress из-за...

CVE-2024-12542-PoC

CVE-2024-12542-PoC Absence d'autorisation menant à une exposition d'informations sensibles sans authentification Description de la vulnérabilité Le plugin linkID pour WordPress est vulnérable à un accès non autorisé aux données en raison d'un contrôle de capacité manquant lors de l'inclusion de l...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Плагин Post Saint -un Username...

CVE-2024-10674

CVE-2024-10674 Exploit - Th Shop Mania = 1.4.9 🚀 Обзор Этот репозиторий содержит эксплойт для уязвимости, идентифицированной как CVE-2024-10674, в теме WordPress Th Shop Mania. Уязвимость позволяет аутентифицированным пользователям с доступом уровня Subscriber и выше устанавливать и активировать...

CVE-2024-10629

🛠️ Exploitation de GPX Viewer CVE-2024-10629 Ce dépôt contient une preuve de concept d'exploitation pour le plugin GPX Viewer pour WordPress, qui est vulnérable à la création arbitraire de fichiers CVE-2024-10629. La vulnérabilité permet aux attaquants authentifiés disposant d'un accès de niveau...

CVE-2024-3553

CVE-2024-3553 Tutor LMS = 2.6.2 - Missing Authorization to Unauthenticated Limited Options Update The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the hidenotices function in all...

CVE-2026-90972

The WP Fusion Lite WordPress plugin, in versions prior to 3.48.0 , contains a vulnerability where it fails to perform a capability check on two of its admin AJAX handlers . This security oversight allows any authenticated subscriber to access sensitive information, specifically enabling them to r...

EUVD-2025-209822

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getticketcontentcallback' function in all versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to view any...

EUVD-2025-209819

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the createadvertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

Linux Distros Unpatched Vulnerability : CVE-2026-102579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other studen...

Linux Distros Unpatched Vulnerability : CVE-2026-102583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-102584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without...

CVE-2026-102583

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

CVE-2026-102584

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...

CVE-2026-102579

A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the same course that they should not have permission to view. This issue leads to unauthorized information disclosure...

CVE-2026-102584 Moodle: missing capability check allows unauthorised grade penalty recalculation

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...