WordPress Th Shop Mania theme <= 1.4.9 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation vulnerability

Authenticated Subscriber+ Arbitrary Plugin Installation/Activation vulnerability discovered by Sean Murphy, Kevin Murphy knmurphy in WordPress Theme Th Shop Mania versions = 1.4.9...

WordPress Inline Click To Tweet Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Inline Click To Tweet Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51803 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e9a9fcb00d6e Credits SOPROBRO Required privilege...

CVE-2024-20540

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists...

CVE-2024-20540

Cisco CVE-2024-20540 affects the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP). The issue is a stored cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input in a page of the interface. An authenticated attack...

CVE-2024-20540 Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists...

CVE-2024-20540 Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists...

PT-2024-8283 · Cisco · Cisco Unified Contact Center Management Portal

Name of the Vulnerable Software and Affected Versions: Cisco Unified Contact Center Management Portal Unified CCMP affected versions not specified Description: The issue is related to the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and is caused b...

RHEL 6 : postgresql92-postgresql (RHSA-2014:0221)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0221 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Multiple stack-based buffer overflow flaws were found in the...

RHEL 6 : openstack-keystone (RHSA-2014:0113)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:0113 advisory. The openstack-keystone packages provide keystone, a Python implementation of the OpenStack Identity service API, which provides Identity, Token,...

CVE-2024-50504

Incorrect Privilege Assignment vulnerability in webxmedia Bulk Change Role bulk-role-change allows Privilege Escalation.This issue affects Bulk Change Role: from n/a through = 1.1...

CVE-2024-50504 WordPress Bulk Change Role plugin <= 1.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in webxmedia Bulk Change Role bulk-role-change allows Privilege Escalation.This issue affects Bulk Change Role: from n/a through = 1.1...

CVE-2024-50504

CVE-2024-50504 : Concrete details across connected sources show a vulnerability in the WordPress plugin “Bulk Change Role” (versions

CVE-2024-50504 WordPress Bulk Change Role plugin <= 1.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in webxmedia Bulk Change Role bulk-role-change allows Privilege Escalation.This issue affects Bulk Change Role: from n/a through = 1.1...

PT-2024-34281 · Unknown · Matt Whiteman Bulk Change Role

Name of the Vulnerable Software and Affected Versions: Matt Whiteman Bulk Change Role versions n/a through 1.1 Description: The issue is related to an Incorrect Privilege Assignment vulnerability that allows Privilege Escalation in Matt Whiteman Bulk Change Role. Recommendations: For Matt Whitema...

WordPress plugin Bulk Change Role 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2024-10008

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missing authorization checks on the /wp-json/masteriyo/v1/users/$id REST API endpoint in all versions up to, and including, 1.13.3. This makes ...

WordPress FileOrganizer plugin <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin FileOrganizer versions = 1.0.9...

PT-2024-15969 · WordPress · Masteriyo - Lms

Name of the Vulnerable Software and Affected Versions: Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress versions up to, and including, 1.13.3 Description: The issue is related to missing authorization checks on the "/wp-json/masteriyo/v1/users/$id" REST API...

WordPress Bulk Change Role plugin <= 1.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Bulk Change Role versions = 1.1...

WordPress Bulk Change Role Plugin <= 1.1 is vulnerable to Privilege Escalation

Software Bulk Change Role Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-50504 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID ae994493e2ec Credits Muhamad Ag...