CVE-2024-54363-Exploit

CVE-2024-54363-Exploit Incorrect Privilege Assignment vulnerability in nssTheme Wp NssUser Register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through 1.0.0. Description The nssTheme Wp NssUser Register plugin for WordPress is vulnerable to an Incorrect Privilege...

CVE-2026-120834 WordPress WP2LEADS plugin <= 3.5.17 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17...

EUVD-2026-120118

Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1...

CVE-2026-119514: Webful Creations RepairBuddy: Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege…

Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through 4.1234...

CVE-2026-120834: Tobias WP2LEADS: Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects…

Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17...

PT-2026-140336

Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through 4.1234...

CVE-2026-109900

The Melapress Role Editor WordPress plugin (versions up to and including 1.3.0 ) is susceptible to an Incorrect Privilege Assignment vulnerability (CWE-266). This flaw allows for Privilege Escalation , potentially enabling an attacker to gain unauthorized access or permissions. Specific details r...

CVE-2026-109900: Melapress Melapress Role Editor: Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege…

Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0...

CVE-2026-120844

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 7.1.3...

EUVD-2026-117997

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 7.1.3...

CVE-2026-114233

Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only order view permissions ORDERMGRVIEW, without ORDERMGRUPDATE or any role on the order, to modify approved orders, changing a ship group's shipping...

CVE-2026-114233

Apache OFBiz versions 24.09 before 24.09.08 on all platforms are affected by an Incorrect Privilege Assignment vulnerability in the Order Manager. An authenticated user with only order view permissions (ORDERMGR_VIEW ), but lacking ORDERMGR_UPDATE or a specific role on the order, can modify appro...

CVE-2026-114233 Apache OFBiz: Incorrect Privilege Assignment in Order Manager Enables Unauthorized Modification of Approved Orders

Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only order view permissions ORDERMGRVIEW, without ORDERMGRUPDATE or any role on the order, to modify approved orders, changing a ship group's shipping...

CVE-2026-114233 Apache OFBiz: Incorrect Privilege Assignment in Order Manager Enables Unauthorized Modification of Approved Orders

Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only order view permissions ORDERMGRVIEW, without ORDERMGRUPDATE or any role on the order, to modify approved orders, changing a ship group's shipping...

EUVD-2026-117517

Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only order view permissions ORDERMGRVIEW, without ORDERMGRUPDATE or any role on the order, to modify approved orders, changing a ship group's shipping...

CVE-2026-109849

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user...

CVE-2026-109849

An incorrect privilege assignment issue exists in Hinemos . An attacker with access to the password change API and specific non-administrative permissions can exploit this vulnerability to change the password of an administrative user . No specific exploit details or remediation steps are provide...

CVE-2026-109849

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user...

EUVD-2026-117201

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user...

PT-2026-137244

Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific permissions that can be assigned to non-administrative users may change the password of an administrative user...