Lucene search
+L

7 matches found

NVD
NVD
•added 2026/07/06 8:16 a.m.•26 views

CVE-2026-12083

The Admin and Site Enhancements ASE WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or nonce checks on a role-restoration request handler, allowing unauthenticated attackers to restore a previously demoted...

8.1CVSS0.00468EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/06 6:00 a.m.•20 views

CVE-2026-12083

The Admin and Site Enhancements ASE WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or nonce checks on a role-restoration request handler, allowing unauthenticated attackers to restore a previously demoted...

8.1CVSS6AI score0.00468EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/06 6:00 a.m.•17 views

EUVD-2026-41811

The Admin and Site Enhancements ASE WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or nonce checks on a role-restoration request handler, allowing unauthenticated attackers to restore a previously demoted...

8.1CVSS6AI score0.00468EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/06 12:00 a.m.•0 views

CVE-2026-12083: Undefined Security Weakness

The Admin and Site Enhancements ASE WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or nonce checks on a role-restoration request handler, allowing unauthenticated attackers to restore a previously demoted...

8.1CVSS5.8AI score0.00468EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/06 12:00 a.m.•39 views

PT-2026-55868

The Admin and Site Enhancements ASE WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or nonce checks on a role-restoration request handler, allowing unauthenticated attackers to restore a previously demoted...

6AI score0.00468EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/09 6:51 p.m.•7 views

CVE-2026-3638

Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and roles via crafted API requests...

5.8AI score0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/09 12:00 a.m.•18 views

Devolutions Server 安全漏洞

Devolutions Server is an application system developed by the Canadian company Devolutions. It provides a fully functional solution for shared accounts and password management. Versions of Devolutions Server prior to 2025.3.11.0 contained security vulnerabilities. These vulnerabilities were due to...

5.9CVSS5.8AI score0.00227EPSS
SaveExploits0References2
Rows per page
Query Builder