Lucene search
+L

98 matches found

Patchstack
Patchstack
•added 2026/08/25 11:53 a.m.•13 views

WordPress f4 Post Tree plugin < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability

Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability discovered by Mustafa Ahmed in WordPress Plugin F4 Post Tree versions 2.0.5...

4.3CVSS5.2AI score0.00142EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/06/29 7:16 a.m.•26 views

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

4.3CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/29 6:00 a.m.•60 views

CVE-2026-9676 f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/29 6:00 a.m.•39 views

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

4.3CVSS5.9AI score0.00142EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/29 6:00 a.m.•12 views

CVE-2026-9676

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

5.9AI score0.00142EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/29 6:00 a.m.•22 views

EUVD-2026-40040

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

4.3CVSS5.9AI score0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/29 6:00 a.m.•17 views

CVE-2026-9676 f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

5.9AI score0.00142EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•22 views

PT-2026-53220

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

5.9AI score0.00142EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/29 12:00 a.m.•0 views

CVE-2026-9676: Undefined Security Weakness

The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts...

4.3CVSS5.9AI score0.00142EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2021-32554

Malicious code in bioql PyPI...

9CVSS8.6AI score0.02483EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-2781

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-50310

Malicious code in bioql PyPI...

6.4CVSS8.6AI score0.0039EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-56447

Malicious code in bioql PyPI...

7.3CVSS6.7AI score0.00186EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-29783

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00319EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2021-32560

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.02393EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/05 3:22 p.m.•12 views

CVE-2025-58617

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

4.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/03 3:15 p.m.•24 views

CVE-2025-58617

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

4.3CVSS0.00241EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/03 3:09 p.m.•15 views

WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin F4 Media Taxonomies versions = 1.1.4...

4.3CVSS6.7AI score0.00241EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/03 2:36 p.m.•7 views

CVE-2025-58617 WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

4.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/03 2:36 p.m.•33 views

CVE-2025-58617 WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

4.3CVSS0.00241EPSS
SaveExploits0References1
Rows per page
Query Builder