Lucene search
K

12 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.4 views

WordPress WP Directorybox Manager plugin <= 2.5 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by Foxyyy in WordPress Plugin WP Directorybox Manager versions = 2.5...

9.8CVSS5.3AI score0.00045EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/02/13 1:15 p.m.4 views

CVE-2024-13182

The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpparserequest' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...

9.8CVSS0.00045EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/13 12:41 p.m.4 views

CVE-2024-13182 WP Directorybox Manager <= 2.5 - Authentication Bypass

The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpparserequest' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...

9.8CVSS7.1AI score0.00045EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/13 12:0 a.m.1 views

WordPress plugin WP Directorybox Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.8AI score0.00045EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/13 12:0 a.m.2 views

PT-2025-6534 · WordPress · Wp Directorybox Manager

Name of the Vulnerable Software and Affected Versions: WP Directorybox Manager plugin for WordPress versions up to, and including, 2.5 Description: The issue is due to incorrect authentication in the wp dp parse request function, allowing unauthenticated attackers to log in as any existing user o...

9.8CVSS9.7AI score0.00045EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/02/10 10:26 p.m.8 views

CVE-2025-0316

The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpenquiryagentcontactformsubmitcallback' function. This makes it possible for unauthenticated attackers to log in as any...

9.8CVSS7.1AI score0.00159EPSS
Exploits2References1
Patchstack
Patchstack
added 2025/02/10 1:20 a.m.5 views

WordPress WP Directorybox Manager plugin <= 2.5 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin WP Directorybox Manager versions = 2.5...

9.8CVSS7AI score0.00159EPSS
Exploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/08 9:20 p.m.9 views

CVE-2025-0316 WP Directorybox Manager <= 2.5 - Authentication Bypass

The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpenquiryagentcontactformsubmitcallback' function. This makes it possible for unauthenticated attackers to log in as any...

9.8CVSS9.7AI score0.00159EPSS
Exploits2References2
CVE
CVE
added 2025/02/08 9:20 p.m.95 views

CVE-2025-0316

CVE-2025-0316 affects the WordPress plugin WP Directorybox Manager (versions &lt;= 2.5). Affected component: authentication logic in wp_dp_enquiry_agent_contact_form_submit_callback leads to an authentication bypass, allowing unauthenticated users who know a username to log in as that user (e.g.,...

9.8CVSS9.6AI score0.00159EPSS
Exploits2References2
Cvelist
Cvelist
added 2025/02/08 9:20 p.m.20 views

CVE-2025-0316 WP Directorybox Manager <= 2.5 - Authentication Bypass

The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wpdpenquiryagentcontactformsubmitcallback' function. This makes it possible for unauthenticated attackers to log in as any...

9.8CVSS0.00159EPSS
Exploits2References2
CNNVD
CNNVD
added 2025/02/08 12:0 a.m.3 views

WordPress plugin WP Directorybox Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

9.8CVSS8.8AI score0.00159EPSS
Exploits2References4
Positive Technologies
Positive Technologies
added 2025/02/08 12:0 a.m.6 views

PT-2025-6024 · WordPress · Wp Directorybox Manager

Name of the Vulnerable Software and Affected Versions: WP Directorybox Manager plugin for WordPress versions up to, and including, 2.5 Description: The issue is due to incorrect authentication in the wp dp enquiry agent contact form submit callback function, making it possible for unauthenticated...

9.8CVSS9.7AI score0.00159EPSS
Exploits2References15
Rows per page
Query Builder