Lucene search
+L

48 matches found

Patchstack
Patchstack
added 2024/12/03 10:10 p.m.9 views

WordPress BasePress Docs plugin <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update vulnerability

Missing Authorization to Authenticated Subscriber+ Database Update vulnerability discovered by BrokenAC ignore in WordPress Plugin Knowledge Base documentation & wiki plugin – BasePress versions = 2.16.3.3...

4.3CVSS6.9AI score0.00267EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/10/08 11:15 a.m.25 views

CVE-2024-9207

The BuddyPress Docs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS0.00362EPSS
SaveExploits0References5
OSV
OSV
added 2023/08/18 2:15 p.m.5 views

CVE-2023-32106

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Fahad Mahmood WP Docs plugin = 1.9.9 versions...

6.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/18 2:15 p.m.24 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Fahad Mahmood WP Docs plugin = 1.9.9 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/18 1:55 p.m.10 views

CVE-2023-32106 WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Fahad Mahmood WP Docs plugin = 1.9.9 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/05/03 12:00 a.m.15 views

WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

Software WP Docs Type Plugin Vulnerable versions = 1.9.9 Fixed in 2.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32106 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6c7b1d23694a Credits Le Ngoc Anh Required...

7.1CVSS5.6AI score0.00382EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/05/13 1:46 a.m.23 views

GHSA-9WF6-88X4-6XVJ BuddyPress Docs plugin Improper Privilege Management

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions...

4.3CVSS4.4AI score0.01121EPSS
SaveExploits0References4
CVE
CVE
added 2017/03/17 8:55 a.m.49 views

CVE-2017-6954

Vulnerability in BuddyPress Docs WordPress plugin (pre-1.9.3) in includes/component.php allows authenticated users to edit other users’ documents due to improper authorization. Impact is unauthorized edits of documents; CVSS base scores (4.0–4.3) indicate MEDIUM severity. Remediation: upgrade to ...

4.3CVSS4.4AI score0.01121EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder