cve-2019-13272

لا يحتوي هذا المستودع على ملف README...

CVE-2026-19892

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajaxiwarpreviewemail function, which uses isadmin as its only authorization check and allows...

yi

لا يحتوي هذا المستودع على ملف README...

CVE-2025-11171

CVE-2025-11171: ثغرة نقص المصادقة في إضافة Chartify لووردبريس الكلمات المفتاحية: CVE-2025-11171, ثغرة إضافة Chartify لووردبريس, نقص المصادقة, أمان ووردبريس, استغلال AJAX غير مصادق, ثغرة إضافة ووردبريس, CWE-306, ثغرة إضافة الرسوم البيانية لووردبريس, تجاوز المصادقة, CVE لووردبريس 2025 جدول المحتويا...

TestCVE-2024-34102

Dieses Repository hat keine README-Datei...

meetup-2-curveball

Questo repository non contiene un README...

bloodit

Questo repository non contiene un README...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Caricamento Arbitrario di File Non Autenticato Descrizione Il plugin WooCommerce Designer Pro per WordPress, utilizzato dal tema WordPress Pricom - Printing Company & Design Services, è vulnerabile a caricamenti arbitrari di file a causa della...

cve-2023-35788

Questo repository non contiene un README...

cve-2013-2072

Questo repository non contiene un README...

CVE-2026-19892

The InfusedWoo Pro WordPress plugin (all versions up to 5.1.17 ) is vulnerable to Privilege Escalation via Account Takeover due to a missing capability check in the ajax_iwar_preview_email() function, which relies solely on is_admin() for authorization. An authenticated attacker with subscriber-l...

CVE-2026-75930 FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter

The FundEngine – Donation and Crowdfunding Platform plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

EUVD-2026-65275

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajaxiwarpreviewemail function, which uses isadmin as its only authorization check and allows...

CVE-2026-19892 InfusedWoo Pro <= 5.1.18 - Authenticated (Subscriber+) Privilege Escalation via Password Reset Link Disclosure

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajaxiwarpreviewemail function, which uses isadmin as its only authorization check and allows...

secveri-cve-2026-50011-positive

Questo repository non contiene un README...

vulnerable-java-app

Questo repository non contiene un README...

CVE-2024-38063

Dieses Repository hat keine README-Datei...

CVE-2025-0288

Questo repository non contiene un README...

CVE-2026-75982 LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter

The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpresscreatepage AJAX action. The LPAdminAjax::createpage handler only checks the editpages capability and a wprest nonce both availabl...

CVE-2026-10627 Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...