PT-2026-94176

Name of the Vulnerable Software and Affected Versions Active Woot Products Tables for WooCommerce versions prior to 2.1.3 Description Certain AJAX actions in the plugin lack authorization and Cross-Site Request Forgery CSRF checks. This allows any authenticated user, including those with subscrib...

CVE-2020-9514

An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user with the Subscriber role to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages via...

CVE-2020-9514

An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user with the Subscriber role to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages via...