Lucene search
+L

1594 matches found

CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•17 views

WordPress plugin extendons-registration-fields 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•15 views

WordPress plugin Voice Feedback 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS5.8AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•10 views

PT-2025-43153

Name of the Vulnerable Software and Affected Versions Progress Planner versions prior to 1.8.1 Description An incorrect privilege assignment exists in Progress Planner, potentially allowing privilege escalation. Recommendations Update Progress Planner to version 1.8.1 or later...

8.8CVSS6.7AI score0.00481EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•3 views

PT-2025-43320

Name of the Vulnerable Software and Affected Versions FantasticPlugins SUMO Memberships for WooCommerce versions through 7.6.0 Description An incorrect privilege assignment exists in FantasticPlugins SUMO Memberships for WooCommerce, potentially allowing privilege escalation. Recommendations Upda...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•2 views

PT-2025-43296

Name of the Vulnerable Software and Affected Versions Goodlayers Core versions prior to 2.1.7 Description A privilege assignment issue exists in Goodlayers Core. This allows for privilege escalation. Recommendations Update Goodlayers Core to version 2.1.7 or later...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•3 views

CVE-2025-62007: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privilege Escalation.This issue affects Voice Feedback: from n/a through = 1.0.3...

8.8CVSS5.8AI score0.0038EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-60220: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through = 3.0.0...

9.8CVSS5.8AI score0.00452EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•3 views

CVE-2025-60211: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Privilege Escalation.This issue affects WooCommerce Registration Fields Plugin - Custom Signup Fields: from n/a through = 3.2.3...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-59580: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through 2.1.7...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•3 views

CVE-2025-53428: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration allows Privilege Escalation.This issue affects Simple User Registration: from n/a through = 6.8...

8.8CVSS5.8AI score0.00364EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•3 views

CVE-2025-53425: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escalation.This issue affects Dokan: from n/a through = 4.1.3...

7.2CVSS5.8AI score0.00433EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-49924: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through = 2.2.4.2...

7.2CVSS5.8AI score0.00403EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•16 views

WordPress plugin SUMO Memberships for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•3 views

PT-2025-43311

Name of the Vulnerable Software and Affected Versions WooCommerce Registration Fields Plugin - Custom Signup Fields versions through 3.2.3 Description The WooCommerce Registration Fields Plugin - Custom Signup Fields contains a flaw related to incorrect privilege assignment, potentially allowing...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•4 views

CVE-2025-60222: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships for WooCommerce: from n/a through = 7.8.0...

8.8CVSS5.8AI score0.00391EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/17 12:00 a.m.•4 views

CVE-2025-62645: Incorrect Privilege Assignment

The Restaurant Brands International RBI assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entire platform via the createToken GraphQL mutation...

9.9CVSS6AI score0.00716EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/17 12:00 a.m.•16 views

PT-2025-52102

Name of the Vulnerable Software and Affected Versions Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex versions through 1.5.8 Description An incorrect privilege assignment exists in Jthemes Sale! Immigration law, Visa services support, Migration Agent...

8.8CVSS7AI score0.00365EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2025/10/15 12:00 a.m.•14 views

The vulnerability of the cscript.exe executable of Rockwell Automation’s HMI software FactoryTalk ViewPoint allows a malicious individual to gain elevated privileges.

The vulnerability of the cscript.exe executable file of Rockwell Automation’s HMI software, FactoryTalk ViewPoint, is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS5.8AI score0.00136EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/14 12:00 a.m.•15 views

The software of the PowerProtect Data Domain Management Center for centralized data storage systems is vulnerable when it comes to improper privilege assignment. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the PowerProtect Data Domain Management Center software, which is used for centralized management of data storage systems, relates to improper privilege assignment. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.5CVSS5.8AI score0.00102EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2025/10/07 5:43 p.m.•25 views

CVE-2025-43914

Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Incorrect Privilege Assignmen...

7.5CVSS0.00102EPSS
SaveExploits0References1
Rows per page
Query Builder