CVE-2025-42891

CVE-2025-42891 involves a missing authorization check in SAP Enterprise Search for ABAP, enabling a high-privilege attacker to read/export database tables into an ABAP report. Affected component: SAP Enterprise Search for ABAP. Root cause: insufficient authorization checks. Impact (per sources): ...

PT-2023-11901

Name of the Vulnerable Software and Affected Versions The Top 10 plugin for WordPress versions up to, and including, 2.10.4 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the tptn export tables function. This allows unauthenticated...

WordPress Plugin Top 10 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...