Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 7:22 a.m.2 views

CVE-2026-2284

The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.8. This is due to a missing capability check and nonce verification on the 'necleandata' AJAX action. This makes it possible for authenticated attackers,...

5.4CVSS5.5AI score0.0005EPSS
Exploits0References1
OSV
OSV
added 2023/01/13 8:15 p.m.0 views

CVE-2022-46951

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=deleteuploads...

7.2CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/01/13 12:0 a.m.1 views

PT-2023-15112 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/ajax.php?action=delete uploads" API endpoint...

7.2CVSS7.6AI score0.0026EPSS
Exploits1References6
CNNVD
CNNVD
added 2023/01/13 12:0 a.m.1 views

Dynamic Transaction Queuing System SQL注入漏洞

Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, an individual developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from the id parameter of its /admin/ajax.php?action=deleteuploads component...

7.2CVSS7.2AI score0.0026EPSS
Exploits1References2
Rows per page
Query Builder