CVE-2024-23518

CVE-2024-23518 concerns the WordPress plugin ACF Photo Gallery Field (navz-photo-gallery) . Affected versions are listed as

CVE-2023-48273

CVE-2023-48273 affects the WordPress plugin Preloader for Website (version

CVE-2023-52224

CVE-2023-52224 affects the WordPress plugin Revolut Gateway for WooCommerce (

CVE-2023-51682

CVE-2023-51682 : Missing Authorization vulnerability in MC4WP (Mailchimp for WordPress) affecting MC4WP

CVE-2024-24703

CVE-2024-24703 is a Broken Access Control vulnerability in MultiVendorX Marketplace (WooCommerce). The issue arises from a missing authorization check that permits unauthenticated actors to perform data-modifying actions on the WC Marketplace <= 4.0.25. PatchStack lists the vulnerable versions...

CVE-2023-51498

CVE-2023-51498 is a Missing Authorization vulnerability (Broken Access Control) in the WordPress plugin WooCommerce Canada Post Shipping , affecting versions up to 2.8.3. The connected Red Hat advisory notes the issue and confirms a patch is available (patched). No exploit details are provided in...

CVE-2023-52199

CVE-2023-52199 affects the WordPress ActivityPub plugin (

CVE-2024-24704

CVE-2024-24704 is a Broken Access Control (Missing Authorization) vulnerability in Load More Anything for WordPress (

CVE-2024-21751

CVE-2024-21751 concerns the WordPress plugin RabbitLoader up to version 2.19.13, where multiple AJAX actions lack proper authorization checks, allowing authenticated users with subscriber-level access and above to modify data (e.g., purge site cache or switch caching modes) without permission. Th...

CVE-2024-23524

CVE-2024-23524 is a Broken Access Control vulnerability in the PilotPress plugin for WordPress. Affected versions are

CVE-2024-25929

CVE-2024-25929: WordPress plugin Product Catalog Enquiry for WooCommerce by MultiVendorX

CVE-2023-52230

CVE-2023-52230 affects Booster Plus for WooCommerce, where versions prior to 7.1.3 expose an authenticated arbitrary WordPress option disclosure due to missing authorization. The issue is a missing authorization vulnerability that could allow a user with at least subscriber privileges to view or ...

CVE-2024-22151

CVE-2024-22151 affects WordPress plugin Import and export users and customers (Codection) up to version 1.24.6, due to Missing Authorization via the fire_cron REST endpoint. Unauthenticated access could trigger plugin cron functionality; CVSS 3.1 base score listed as 5.3 (Medium). Connected sourc...

CVE-2024-31969

CVE-2024-31969 is a local privilege-escalation in sudo via sudoedit. The flaw, introduced in sudo 1.9.0, stems from improper validation of user environment variables and file ownership in sudoedit, enabling a local user with sudoedit access to modify files as root (e.g., via SUDO_EDITOR or symlin...

CVE-2024-5761

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-5260. Reason: This candidate is a reservation duplicate of CVE-2024-5260. Notes: All CVE users should reference CVE-ID instead of this candidate. All references and descriptions in this candidate have been removed to...

GO-2024-2664 ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel

ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

CVE-2020-27354

Rejected reason: CVE ID was once reserved, but never used...

CVE-2020-35154

Rejected reason: CVE ID was once reserved, but never used...

CVE-2023-50804

CVE-2023-50804 concerns Samsung baseband/modem software in Exynos devices where NAS (Non-Access‑Stratum) format type checking is insufficient, enabling authentication bypass in the baseband stack. The issue affects multiple Exynos SoCs (e.g., Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/...

CVE-2023-49927

CVE-2023-49927 affects Samsung Mobile Processor, Wearable Processor, and Modem Exynos families (980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, and related modems). The baseband software fails to properly validate the RRC format types, leading to insufficient encryption. This is de...