Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/17 2:48 p.m.•25 views

CVE-2024-13800

CVE-2024-13800 Popup Plugin For WordPress - ConvertPlus = 3.5.30 - Missing Authorization to Authenticated Subscriber+ Limited Options Update Description The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing...

8.1CVSS8.4AI score0.0047EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•7 views

CVE-2024-13800: Missing Authorization

The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cpdismissnotice' AJAX endpoint in all versions up to, and including, 3.5.30. This makes it possible for authenticated attackers,...

8.1CVSS5.5AI score0.0047EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•21 views

WordPress plugin ConvertPlus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS8.1AI score0.0047EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/05/04 3:31 a.m.•57 views

CVE-2024-3237 ConvertPlug <= 3.5.25 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

The ConvertPlug plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cpdismissnotice function in all versions up to, and including, 3.5.25. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

5.4CVSS6.5AI score0.00368EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/04 12:00 a.m.•22 views

WordPress Plugin ConvertPlug 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00368EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/04 12:00 a.m.•10 views

CVE-2024-3237: Missing Authorization

The ConvertPlug plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cpdismissnotice function in all versions up to, and including, 3.5.25. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

5.4CVSS5.8AI score0.00368EPSS
SaveExploits0References1
Rows per page
Query Builder