CVE-2024-43240

Improper Privilege Management vulnerability in azzaroco Ultimate Membership Pro allows Privilege Escalation.This issue affects Ultimate Membership Pro: from n/a through 12.6...

CVE-2024-43245

CVE-2024-43245 affects the WordPress plugin JobSearch (WP Job Board). The issue is an Improper Privilege Management that enables an Authentication Bypass to Account Takeover , potentially allowing an attacker to gain control of user accounts. Affected scope: JobSearch versions from n/a up to and ...

CVE-2024-43245 WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability

Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4...

CVE-2024-43240 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability

Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...

PT-2024-30478 · Geek Code · Geek Code Lab Login As Users

Name of the Vulnerable Software and Affected Versions: Geek Code Lab Login As Users versions 1.4.2 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation. This can be exploited in the Login As Users feature. Recommendations: For versions 1.4....

CVE-2024-43153

Improper Privilege Management vulnerability in WofficeIO Woffice allows Privilege Escalation.This issue affects Woffice: from n/a through 5.4.10...

CVE-2024-43153 WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through = 5.4.10...

CVE-2024-43121

Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...

CVE-2024-43121

Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...

WordPress plugin HUSKY 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Woffice 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Siemens SINEC Traffic Analyzer

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2024-30309 · Husky · Husky

Name of the Vulnerable Software and Affected Versions: HUSKY versions 1.3.6.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the HUSKY software. Recommendations: For versions 1.3.6.1 and earlier, at the moment, there is no...

PT-2024-7361 · WordPress · Ultimate Membership Pro

Name of the Vulnerable Software and Affected Versions: Ultimate Membership Pro versions through 12.6 Description: The issue is related to improper privilege management in the Ultimate Membership Pro plugin for WordPress, which can allow an attacker to escalate their privileges. Recommendations: F...

CVE-2024-34620

Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service...

CVE-2024-34620

CVE-2024-34620 describes an improper privilege management issue in SumeNNService (Samsung Mobile) prior to SMR Aug-2024 Release 1, enabling a local attacker to start a privileged service. The vulnerability is rated HIGH with both CVSS v3.1 metrics indicating LOCAL access, LOW attack complexity, a...

VulnCheck KEV: CVE-2024-43153

Improper Privilege Management vulnerability in WofficeIO Woffice allows Privilege Escalation.This issue affects Woffice: from n/a through 5.4.10...

CVE-2023-52209

CVE-2023-52209 affects WPForms User Registration (WordPress plugin). Affected versions:

CVE-2024-38770 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability

Improper Privilege Management vulnerability in Revmakx Backup and Staging by WP Time Capsule allows Privilege Escalation, Authentication Bypass.This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.20...

CVE-2024-39633

CVE-2024-39633 covers an Improper Privilege Management vulnerability in the WordPress plugin PowerPack for Beaver Builder . The issue enables a Privilege Escalation path for users with at least Contributor+ privileges, allowing elevation of rights within the plugin. Affected versions are up to an...