11 matches found
EUVD-2025-12802
Malicious code in bioql PyPI...
CVE-2025-4179
The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capability check on the registerUser function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to register new user accounts as authors...
CVE-2025-4179
The CVE-2025-4179 entry concerns the WordPress Flynax Bridge plugin (versions ≤ 2.2.0). The underlying issue is a missing capability check in the registerUser() function, enabling unauthenticated attackers to create new user accounts with author-level privileges (limited Privilege Escalation). Te...
PT-2025-18745 · WordPress · Flynax Bridge
Name of the Vulnerable Software and Affected Versions: Flynax Bridge plugin for WordPress versions up to, and including, 2.2.0 Description: The issue is related to limited Privilege Escalation due to a missing capability check on the registerUser function. This allows unauthenticated attackers to...
CVE-2015-10042
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is...
CVE-2015-10042 Dovgalyuk AIBattle procedures.php registerUser sql injection
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is...
Dovgalyuk AIBattle SQL注入漏洞
AIBattle is a platform for creating AI contests by Pavel Dovgalyuk Personal Developer. Dovgalyuk AIBattle suffers from a SQL injection vulnerability that originates in the function registerUser in the file site/procedures.php, which operates on the parameter postLogin resulting in SQL injection...
PT-2023-10221 · Unknown · Dovgalyuk Aibattle
Name of the Vulnerable Software and Affected Versions: Dovgalyuk AIBattle affected versions not specified Description: A critical vulnerability was found in Dovgalyuk AIBattle. The issue affects the registerUser function in the file site/procedures.php. The manipulation of the postLogin argument...
VulnCheck KEV: CVE-2019-9879
The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation...
CVE-2019-9879
The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation...
Design/Logic Flaw
The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation...