Lucene search
+L

5490 matches found

Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.14 views

PT-2025-54355

Name of the Vulnerable Software and Affected Versions MyD Delivery versions through 1.3.7 Description An authorization bypass exists in Eduardo Villão MyD Delivery due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendations...

5.3CVSS6.5AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.21 views

PT-2025-54366

Name of the Vulnerable Software and Affected Versions RestroPress versions through 3.2.4.2 Description An authorization issue exists in Magnigenie RestroPress due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations Update RestroPress to a...

5.3CVSS6.5AI score0.00217EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.10 views

PT-2025-54405

Missing Authorization vulnerability in merkulove Questionar for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Questionar for Elementor: from n/a through 1.1.7...

5.4CVSS7AI score0.00249EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.21 views

PT-2025-54346

Name of the Vulnerable Software and Affected Versions 101gen Wawp versions through 4.0.5 Description A missing authorization issue exists in 101gen Wawp, allowing exploitation due to incorrectly configured access control security levels. Recommendations Versions prior to 4.0.5 are affected. At th...

5.3CVSS6.3AI score0.00222EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.17 views

PT-2025-54342

Name of the Vulnerable Software and Affected Versions Reuters Direct versions through 3.0.0 Description A missing authorization issue exists in Reuters Direct, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Reuters Direct to a version later...

5.3CVSS6.5AI score0.00249EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.14 views

PT-2025-54407

Missing Authorization vulnerability in merkulove Slider for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider for Elementor: from n/a through 1.0.10...

5.4CVSS7AI score0.00249EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.10 views

PT-2025-54434

Missing Authorization vulnerability in merkulove Criptopayer for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Criptopayer for Elementor: from n/a through 1.0.1...

5.4CVSS7AI score0.00197EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.12 views

PT-2025-54352

Name of the Vulnerable Software and Affected Versions WP Grids EasyTest versions through 1.0.1 Description An authorization issue exists in WP Grids EasyTest, allowing exploitation due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations Updat...

5.3CVSS6.5AI score0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.11 views

PT-2025-54404

Missing Authorization vulnerability in merkulove Couponer for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Couponer for Elementor: from n/a through 1.1.7...

5.4CVSS7AI score0.00249EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.16 views

WordPress plugin History Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00177EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.18 views

PT-2025-54349

Name of the Vulnerable Software and Affected Versions nicdark Hotel Booking versions through 3.8 Description An authorization issue exists in nicdark Hotel Booking, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized access to the system...

5.3CVSS6.4AI score0.00255EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.14 views

PT-2025-54387

Missing Authorization vulnerability in Digages Direct Payments WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Direct Payments WP: from n/a through 1.3.0...

4.3CVSS7AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.14 views

PT-2025-54383

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through 1.14...

4.3CVSS6.9AI score0.00177EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.11 views

WordPress plugin Logger for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

5.4CVSS5.8AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.9 views

WordPress plugin Appender 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.9 views

PT-2025-54433

Name of the Vulnerable Software and Affected Versions Countdowner for Elementor versions through 1.0.4 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for potential exploitation of the system. Recommendation...

5.4CVSS6.4AI score0.00197EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.14 views

PT-2025-54361

Name of the Vulnerable Software and Affected Versions Wiremo versions through 1.4.99 Description A missing authorization issue exists in Wiremo, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized access control bypass. Recommendations At the...

5.3CVSS6.4AI score0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.15 views

PT-2025-54364

Name of the Vulnerable Software and Affected Versions Solwininfotech Trash Duplicate and 301 Redirect versions through 1.9.1 Description A missing authorization flaw exists in Solwininfotech Trash Duplicate and 301 Redirect, allowing exploitation of incorrectly configured access control security...

5.3CVSS6.5AI score0.00261EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.13 views

PT-2025-54435

Name of the Vulnerable Software and Affected Versions merkulove Headinger for Elementor versions through 1.1.4 Description A missing authorization flaw exists in merkulove Headinger for Elementor, allowing exploitation due to incorrectly configured access control security levels. Recommendations...

5.4CVSS6.5AI score0.00197EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/30 4:10 p.m.5 views

CVE-2025-66080 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.0.3...

5.3CVSS6.6AI score0.00273EPSS
SaveExploits0References1
Rows per page
Query Builder