Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/08/05 6:37 a.m.37 views

CVE-2026-6639 AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6. This is due to the getCurrentTaskResults method in modules/workspace/controller.php being accessible without authentication or authorizati...

7.5CVSS0.00367EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/12/19 9:08 p.m.10 views

WordPress WP Project Manager plugin <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API vulnerability

Authenticated Subscriber+ Sensitive Information Exposure via Project Task List REST API vulnerability discovered by Noah Stead TurtleBurg in WordPress Plugin WP Project Manager versions = 2.6.15...

6.5CVSS7AI score0.00392EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder