Lucene search
+L

5369 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•4 views

CVE-2023-51359: Missing Authorization

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.2.0...

8.8CVSS5.9AI score0.00591EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2023-47826: Missing Authorization

Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.3...

9.8CVSS5.9AI score0.00489EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•6 views

CVE-2023-49832: Missing Authorization

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through = 6.10.2...

5.3CVSS5.9AI score0.00498EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•6 views

CVE-2023-47761: Missing Authorization

Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through = 2.0.7...

4.3CVSS5.9AI score0.00337EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•7 views

CVE-2023-49755: Missing Authorization

Missing Authorization vulnerability in B.M. Rafiul Alam Elementor Timeline Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Timeline Widget: from n/a through 2.2...

5.4CVSS5.9AI score0.00476EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/06 2:15 p.m.•35 views

CVE-2024-53825

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through = 6.3.2...

7.2CVSS0.00364EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/06 2:15 p.m.•18 views

CVE-2024-53805

Missing Authorization vulnerability in brandtoss WP Mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.8.16.0...

9.8CVSS5.8AI score0.00581EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/06 2:15 p.m.•33 views

CVE-2024-53803

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through = 1.8.16.0...

8.8CVSS0.00514EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/06 2:15 p.m.•18 views

CVE-2024-53806

Missing Authorization vulnerability in yonifre Maspik – Spam blacklist contact-forms-anti-spam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Maspik – Spam blacklist: from n/a through = 2.2.7...

5.4CVSS0.0041EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/06 2:15 p.m.•21 views

CVE-2024-53799

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through = 7.3.0...

4.3CVSS0.00394EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/06 1:15 p.m.•33 views

CVE-2024-10773

The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gain full access to the device...

9CVSS0.00592EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/12/06 1:07 p.m.•54 views

CVE-2024-53799 WordPress FloristPress plugin <= 7.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through = 7.3.0...

4.3CVSS0.00394EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/06 1:07 p.m.•21 views

CVE-2024-53803 WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in brandtoss WP Mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.8.16.0...

6.5CVSS6.9AI score0.00514EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/06 1:07 p.m.•68 views

CVE-2024-53813

CVE-2024-53813 concerns the WP Travel WordPress plugin (affected: WP Travel

6.5CVSS7.2AI score0.00284EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/06 1:07 p.m.•85 views

CVE-2024-53825

CVE-2024-53825 (WordPress FileBird Lite) : A Missing Authorization / Broken Access Control vulnerability affects the FileBird Lite plugin for WordPress (versions up to and including 6.3.2). Public sources in the Connected documents describe an incorrect access control configuration that could be ...

7.2CVSS7.2AI score0.00364EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/12/06 1:05 p.m.•38 views

CVE-2024-53805 WordPress WP Mailster plugin <= 1.8.16.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through = 1.8.16.0...

7.5CVSS0.00581EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/06 12:31 p.m.•41 views

CVE-2024-10773 SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for pass-the-hash attacks

The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gain full access to the device...

9CVSS0.00592EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/12/06 12:00 a.m.•27 views

PT-2024-16533 · Sick · Sick Tim3Xx +2

Name of the Vulnerable Software and Affected Versions: SICK InspectorP61x versions affected versions not specified SICK InspectorP62x versions affected versions not specified SICK TiM3xx versions affected versions not specified Description: The product is vulnerable to pass-the-hash attacks in...

9CVSS7AI score0.00592EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•5 views

CVE-2024-53805: Missing Authorization

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through = 1.8.16.0...

9.8CVSS5.9AI score0.00581EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•6 views

CVE-2024-53803: Missing Authorization

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through = 1.8.16.0...

8.8CVSS5.9AI score0.00514EPSS
SaveExploits0References1
Rows per page
Query Builder