2362 matches found
CVE-2024-22151
CVE-2024-22151 affects WordPress plugin Import and export users and customers (Codection) up to version 1.24.6, due to Missing Authorization via the fire_cron REST endpoint. Unauthenticated access could trigger plugin cron functionality; CVSS 3.1 base score listed as 5.3 (Medium). Connected sourc...
CVE-2024-31969
CVE-2024-31969 is a local privilege-escalation in sudo via sudoedit. The flaw, introduced in sudo 1.9.0, stems from improper validation of user environment variables and file ownership in sudoedit, enabling a local user with sudoedit access to modify files as root (e.g., via SUDO_EDITOR or symlin...
CVE-2024-5761
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-5260. Reason: This candidate is a reservation duplicate of CVE-2024-5260. Notes: All CVE users should reference CVE-ID instead of this candidate. All references and descriptions in this candidate have been removed to...
GO-2024-2664 ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel
ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...
CVE-2020-35154
Rejected reason: CVE ID was once reserved, but never used...
CVE-2020-27354
Rejected reason: CVE ID was once reserved, but never used...
CVE-2023-50804
CVE-2023-50804 concerns Samsung baseband/modem software in Exynos devices where NAS (Non-Access‑Stratum) format type checking is insufficient, enabling authentication bypass in the baseband stack. The issue affects multiple Exynos SoCs (e.g., Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/...
CVE-2023-49927
CVE-2023-49927 affects Samsung Mobile Processor, Wearable Processor, and Modem Exynos families (980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, and related modems). The baseband software fails to properly validate the RRC format types, leading to insufficient encryption. This is de...
CVE-2024-25600
The Bricks Builder plugin for WordPress is vulnerable to unauthenticated remote code execution (RCE) in all versions up to and including 1.9.6 . The root cause is the improper handling of user-controlled input within the render_element REST endpoint (/wp-json/bricks/v1/render_element), which allo...
CVE-2023-52176
CVE-2023-52176 describes an Authentication Bypass by Spoofing in the Miniorange Malware Scanner (WordPress plugin). Affected products: Malware Scanner from n/a through version 4.7.1. Root cause per entry: bypasses access controls (ACLs) through spoofed authentication, enabling access to functiona...
CVE-2023-52147
CVE-2023-52147 concerns the WordPress plugin All In One WP Security & Firewall (AIOS)
CVE-2023-51667
CVE-2023-51667 affects the Rate my Post – WP Rating System WordPress plugin (
CVE-2023-51544
CVE-2023-51544 affects the RegistrationMagic WordPress plugin (versions up to 5.2.5.0). It is a Form Submission Limit Bypass caused by improper control of interaction frequency; the vulnerability has been patched in a later release per Wordfence records (no exploit/vector details provided in the ...
CVE-2023-51543
CVE-2023-51543 describes an Authentication Bypass by Spoofing in the WordPress plugin RegistrationMagic (Metagauss) that allows bypassing ACL constraints to access restricted functionality. Affected versions are RegistrationMagic up to 5.2.5.0 (version range stated as n/a through 5.2.5.0). The vu...
CVE-2023-49774
CVE-2023-49774 concerns the WordPress plugin WP Photo Album Plus (versions up to 8.5.02.005). The Red Hat/NVD entries describe an Information Exposure/Bypass issue where unauthenticated users could bypass login protection by manipulating IP-related behavior. PatchStack confirms the vulnerability ...
CVE-2023-48753
CVE-2023-48753 covers a WordPress plugin issue in “Restricted Site Access” where IP address-based access control can be bypassed via IP spoofing. Affected plugin: Restricted Site Access (WordPress) up to and including version 7.4.1. The root cause is insufficient restriction of how IP information...
CVE-2023-48745
CVE-2023-48745 affects the WordPress plugin Captcha Code by WebFactory Ltd. It is caused by improper restriction of excessive authentication attempts, enabling a bypass of captcha protection. Affected versions are
CVE-2023-48290
Form Maker by 10Web WordPress plugin