Lucene search
+L

1797 matches found

Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.34 views

PT-2025-33382 · Elementor +1 · Elementor +1

Name of the Vulnerable Software and Affected Versions: hashthemes Easy Elementor Addons versions through 2.2.7 Description: The software contains a missing authorization flaw that allows exploiting incorrectly configured access control security levels. Recommendations: Update hashthemes Easy...

4.3CVSS6.3AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.9 views

PT-2025-33374 · Unknown · Goodlayers Modernize

Name of the Vulnerable Software and Affected Versions: GoodLayers Modernize versions through 3.4.0 Description: The software contains a missing authorization flaw that allows exploitation due to incorrectly configured access control security levels. Recommendations: Update GoodLayers Modernize to...

4.3CVSS7.2AI score0.00241EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.11 views

WordPress plugin Cost Calculator 安全漏洞

WordPress Cost Calculator is a plugin for creating quote or cost estimation forms, which is mainly used to help users calculate prices based on different parameters in real time and generate professional quotes. WordPress Cost Calculator suffers from an authorization issue vulnerability that stem...

4.3CVSS6.8AI score0.00198EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/08 9:15 p.m.12 views

CVE-2025-7030

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication TFA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.11.0...

6.5CVSS5.8AI score0.00364EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/08 12:00 a.m.11 views

ServiceNow Now Platform 安全漏洞

ServiceNow Now Platform is a cloud-based platform from US-based ServiceNow that uses AI and machine learning to automate and optimize work across the enterprise. ServiceNow Now Platform has a security vulnerability that stems from a misconfiguration of access control lists that could lead to...

8.2CVSS6.8AI score0.01616EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/07/02 12:00 a.m.21 views

The vulnerability of the Blitz Identity Provider software, related to incorrect configuration of access rights, allows a hacker to send an email with arbitrary text to the user’s assigned email address.

The vulnerability of the Blitz Identity Provider software is related to incorrect configuration of access rights. Exploiting this vulnerability could allow a malicious actor to send an email with arbitrary text to the user’s associated account...

6.8CVSS5.6AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/07/01 12:00 a.m.12 views

WordPress plugin POSIMYTH Innovation The Plus Addons for Elementor Pro 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin POSIMYTH Innovation The...

5.4CVSS6.4AI score0.00257EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.12 views

WordPress plugin Trusty Whistleblowing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.2CVSS6.5AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.8 views

WordPress plugin Audio Editor & Recorder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS5.6AI score0.00303EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/06 1:15 p.m.7 views

CVE-2025-30990

Missing Authorization vulnerability in ThemeHunk ThemeHunk allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThemeHunk: from n/a through 1.1.1...

5.4CVSS5.8AI score0.00252EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/06 1:15 p.m.3 views

CVE-2025-30927

Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...

4.3CVSS5.9AI score0.00283EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/06/06 1:15 p.m.7 views

CVE-2025-30932

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.30.32...

5.4CVSS5.9AI score0.00301EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.5 views

WordPress plugin FraudLabs Pro for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS5.5AI score0.0032EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.10 views

WordPress plugin bbPress API 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS5.5AI score0.0034EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.11 views

WordPress plugin KI Live Video Conferences 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...

5.3CVSS5.4AI score0.0032EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:12 a.m.7 views

CVE-2024-56255

Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AyeCode Connect: from n/a through = 1.3.8...

4.3CVSS7.2AI score0.00286EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.10 views

CVE-2024-56253

Missing Authorization vulnerability in supsystic Data Tables Generator by Supsystic data-tables-generator-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Data Tables Generator by Supsystic: from n/a through = 1.10.36...

5.4CVSS7.2AI score0.00319EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.10 views

CVE-2024-56002

Missing Authorization vulnerability in mightyforms Contact Form, Survey & Form Builder – MightyForms mightyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form, Survey & Form Builder – MightyForms: from n/a through = 1.3.9...

6.4CVSS7.2AI score0.00286EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:08 a.m.10 views

CVE-2024-56236

Missing Authorization vulnerability in Juniper Hestia Nginx Cache hestia-nginx-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hestia Nginx Cache: from n/a through = 2.4.0...

4.3CVSS7.3AI score0.0035EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:08 a.m.10 views

CVE-2024-56227

Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through = 1.7.1001...

4.3CVSS7.2AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder