EUVD-2023-52808

Malicious code in bioql PyPI...

CVE-2023-48775

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...

CVE-2013-2108

WordPress WP Cleanfix Plugin 2.4.4 has CSRF...

CVE-2023-48775

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...

CVE-2023-48775

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...

CVE-2023-48775 WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...

CVE-2023-48775 WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...

CVE-2023-48775: Missing Authorization

Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2...

PT-2024-13648 · WordPress · Gfazioli Wp Cleanfix

Name of the Vulnerable Software and Affected Versions: Gfazioli WP Cleanfix versions through 5.6.2 Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This enables potential unauthorized access...

WordPress plugin WP Cleanfix has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WP Cleanfix < 5.7.0 - Subscriber+ Post/Comment/Post Meta Content Replacement

Description The plugin is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the register function, allowing authenticated attackers, with subscriber-level access and above, to find and replace post, comment, and postmeta content as well as...

WordPress WP Cleanfix Plugin <= 5.6.2 is vulnerable to Broken Access Control

Software WP Cleanfix Type Plugin Vulnerable versions = 5.6.2 Fixed in 5.7.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-48775 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3abc506f014f Credits Abdi Pranata Required privilege...

CVE-2013-2108

WordPress WP Cleanfix Plugin 2.4.4 has CSRF...

CVE-2013-2109

WordPress plugin wp-cleanfix has Remote Code Execution...

Cross site request forgery (csrf)

WordPress WP Cleanfix Plugin 2.4.4 has CSRF...

Remote code execution

WordPress plugin wp-cleanfix has Remote Code Execution...

CVE-2013-2109

WordPress plugin wp-cleanfix has Remote Code Execution...

CVE-2013-2109

CVE-2013-2109 affects WordPress plugin wp-cleanfix, with a Remote Code Execution vulnerability. The NVD lists CVSS-2.0 base score 6.8 (Partial confidentiality, integrity, availability impact) and CVSS-3.1 base score 8.8 (High impact, network attack, user interaction required). The connected docum...

CVE-2013-2108

WordPress WP Cleanfix Plugin 2.4.4 has CSRF...

CVE-2013-2108

The CVE-2013-2108 entry concerns WordPress WP Cleanfix Plugin (v2.4.4) susceptible to a Cross‑Site Request Forgery (CSRF). Multiple connected sources corroborate a CSRF flaw in this plugin, with additional references noting related exposure of remote execution and XSS in WP CleanFix, and an explo...