1085 matches found
CVE-2024-55970
File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734...
CVE-2024-55970
CVE-2024-55970 affects Syncfusion Essential Studio for ASP.NET MVC prior to 27.1.55. The issue is a directory traversal in the File Manager component tied to a request parameter (I644734). Impact details in the connected sources indicate a traversal path could expose files/directories; no explici...
Syncfusion Essential Studio for ASP.NET MVC 安全漏洞
Syncfusion Essential Studio for ASP.NET MVC is a set of server-side wrappers powered by Essential JavaScript from Syncfusion. A security vulnerability exists in Syncfusion Essential Studio for ASP.NET MVC prior to version 27.1.55, which stems from a traversal issue with the file manager in...
CVE-2022-47594
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5...
CVE-2022-47594
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5...
CVE-2022-47594 WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5...
CVE-2022-47594
CVE-2022-47594 affects the WordPress plugin Essential Blocks for Gutenberg (
CVE-2022-47594 WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 3.8.5...
CVE-2022-46846
CVE-2022-46846 corresponds to a Missing Authorization vulnerability in the WordPress plugin Trending/Popular Post Slider and Widget (
WordPress Essential Real Estate plugin <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure vulnerability
Missing Authorization to Authenticated Contributor+ Information Exposure vulnerability discovered by Noah Stead TurtleBurg in WordPress Plugin Essential Real Estate versions = 5.1.6...
CVE-2024-12329
The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2024-12329
The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2024-12329 Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure
The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2024-12329 Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure
The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2024-12329
CVE-2024-12329 affects the Essential Real Estate WordPress plugin. The vulnerability is a missing capability check on several pages/post types in all versions up to and including 5.1.6, enabling authenticated attackers with Contributor-level access and above to view invoices and transaction logs....
PT-2024-17545 · WordPress · Essential Real Estate
Name of the Vulnerable Software and Affected Versions: Essential Real Estate plugin for WordPress versions up to and including 5.1.6 Description: The issue is related to a missing capability check on several pages and post types, allowing authenticated attackers with Contributor-level access and...
WordPress plugin Essential Real Estate 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...
CVE-2023-51360
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.2.0...
CVE-2023-51360
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0...
CVE-2023-51359
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.2.0...