2 matches found
PT-2017-10974
Name of the Vulnerable Software and Affected Versions WordPress versions 4.7.0 through 4.7.1 Description The issue allows remote attackers to modify arbitrary pages. This is achieved by exploiting the register routes function in the REST API, which does not require an integer identifier. Attacker...
7.5CVSS0.84935EPSS
SaveExploits1References16
PT-2012-3413
Name of the Vulnerable Software and Affected Versions Cool Aid module versions prior to 6.x-1.9 for Drupal Description The issue concerns the Cool Aid module for Drupal, where access restrictions are not properly enforced. This allows remote authenticated users with the administer coolaid...
4.9CVSS0.01207EPSS
SaveExploits0References8
20