5352 matches found
CVE-2024-56007
Missing Authorization vulnerability in leader codes Leader leader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leader: from n/a through = 2.6.1...
CVE-2024-55993
Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through = 2.1.61...
CVE-2024-55996
Missing Authorization vulnerability in dreamfox Dreamfox Media Payment gateway per Product for Woocommerce woocommerce-product-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dreamfox Media Payment gateway per Product for Woocommerce: from n/a...
CVE-2024-55992
Missing Authorization vulnerability in Open Tools WooCommerce Basic Ordernumbers woocommerce-basic-ordernumbers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Basic Ordernumbers: from n/a through = 1.4.4...
CVE-2024-54402
Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through = 1.4.6...
CVE-2024-54359 WordPress Banner System plugin <= 1.0.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Saul Morales Pacheco Banner System banner-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Banner System: from n/a through = 1.0.0...
CVE-2024-54359 WordPress Banner System plugin <= 1.0.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Saul Morales Pacheco Banner System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Banner System: from n/a through 1.0.0...
CVE-2024-54384 WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.8.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.8.3...
CVE-2024-55993 WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control vulnerability
Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through 2.1.60...
CVE-2024-55994 WordPress 畅言评论系统 plugin <= 2.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in sohu 畅言评论系统 changyan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 畅言评论系统: from n/a through = 2.0.5...
CVE-2024-56001
CVE-2024-56001 (Ksher) involves a Missing Authorization flaw in Ksher (KSher) affecting versions up to 1.1.1. Root cause: insecure access control configuration allowing unauthorized actions. Connected sources (Red Hat advisory and Wordfence vulnerability list) confirm the issue and indicate a pat...
CVE-2024-55994 WordPress 畅言评论系统 plugin <= 2.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in sohu 畅言评论系统 changyan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 畅言评论系统: from n/a through = 2.0.5...
CVE-2024-56007
CVE-2024-56007 is a Missing Authorization vulnerability in the Leader WordPress plugin, affecting versions up to 2.6.1. Connected Red Hat advisory repeats the description; no patch status or remediation details are provided in the connected sources.
CVE-2024-56007 WordPress Leader plugin <= 2.6.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ram Segev Leader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leader: from n/a through 2.6.1...
CVE-2024-54402 WordPress Arabic Webfonts plugin <= 1.4.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through = 1.4.6...
CVE-2024-55998
CVE-2024-55998 affects Popup Surveys & Polls for WordPress (Mare.io) up to version 1.36. The issue is Missing Authorization caused by incorrectly configured access control security levels, allowing unauthorized access to privileged actions. According to the CVSS 3.1 metrics provided, the base sco...
CVE-2024-55998 WordPress Popup Surveys & Polls for WordPress (Mare.io) plugin <= 1.36 - Settings Change vulnerability
Missing Authorization vulnerability in Eric Sloan Popup Surveys & Polls for WordPress Mare.io popup-surveys allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys & Polls for WordPress Mare.io: from n/a through = 1.36...
CVE-2024-56004
CVE-2024-56004 is a Missing Authorization vulnerability in the Easy Site Importer WordPress plugin (versions up to 1.0.1). It allows authenticated users (Subscriber+) to modify plugin settings due to insufficient access control. Connected sources confirm the issue and indicate no public patch det...
CVE-2024-56004: Missing Authorization
Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through = 1.0.1...
CVE-2024-54384: Missing Authorization
Missing Authorization vulnerability in Anh Tran Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through = 2.8.3...