Lucene search
+L

25 matches found

NVD
NVD
•added 2021/08/09 10:15 a.m.•33 views

CVE-2021-24501

The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objects. This allowed a logged in user to modify or delete objects belonging to other users on the site...

8.1CVSS0.01251EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/08/09 10:15 a.m.•17 views

CVE-2021-24501

The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objects. This allowed a logged in user to modify or delete objects belonging to other users on the site...

8.1CVSS7.2AI score0.01251EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2021/08/09 12:00 a.m.•5 views

PT-2021-16023

Name of the Vulnerable Software and Affected Versions Workreap WordPress theme versions prior to 2.2.2 Description The issue concerns missing authorization checks in several AJAX actions, allowing a logged-in user to modify or delete objects belonging to other users on the site. This affects...

8.1CVSS5.8AI score0.01251EPSS
SaveExploits2References4
NVD
NVD
•added 2017/08/29 3:29 p.m.•29 views

CVE-2017-12422

NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors...

6.5CVSS6.3AI score0.01632EPSS
SaveExploits0References2
OSV
OSV
•added 2017/08/29 3:29 p.m.•18 views

CVE-2017-12422

NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors...

6.5CVSS5.9AI score0.01632EPSS
SaveExploits0References2
Rows per page
Query Builder