WordPress Plugin RevivePress Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-1844: Missing Authorization

The RevivePress – Keep your Old Content Evergreen plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the importdata and copydata functions in all versions up to, and including, 1.5.6. This makes it possible for authenticated...

CVE-2021-24353

The importdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects...

CVE-2021-24353

The importdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects...

Design/Logic Flaw

The importdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects...

CVE-2021-24353

The Simple 301 Redirects by BetterLinks WordPress plugin, in versions prior to 2.0.4 , contains a logic flaw in its import_data function. The vulnerability exists because the function lacks necessary capability and nonce checks , allowing unauthenticated users to import a set of site redirects, w...

CVE-2021-24353: Missing Authorization

The importdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects...

OSV-2021-397 Heap-buffer-overflow in Crypto::UnsignedBigInteger::UnsignedBigInteger

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30920 Crash type: Heap-buffer-overflow READ 1 Crash state: Crypto::UnsignedBigInteger::UnsignedBigInteger Crypto::UnsignedBigInteger::importdata Crypto::derdecodeinteger...

WordPress WPLMS 1.8.4.1 Privilege Escalation Vulnerability

WordPress WPLMS theme version 1.8.4.1 suffers from a privilege escalation vulnerability. ------------------------------------------------------------------------------ WordPress WPLMS Theme Previlege Escalation ------------------------------------------------------------------------------ - Autho...