CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2026/10/07 7:16 a.m.•32 views

CVE-2026-104678

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

2.7CVSS0.00168EPSS

SaveExploits0References1

CVE•added 2026/10/07 6:00 a.m.•33 views

CVE-2026-104678

The CP Media Player WordPress plugin (versions before 1.3.4 ) is vulnerable to an improper access control flaw in its settings-page handler . Due to a lack of capability checks, users with only Contributor-level access can perform actions reserved for administrators, such as creating, modifying, ...

2.7CVSS5.9AI score0.00168EPSS

SaveExploits0References1

Vulnrichment•added 2026/10/07 6:00 a.m.•23 views

CVE-2026-104678 CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update

5.9AI score0.00168EPSS

SaveExploits0References1

Cvelist•added 2026/10/07 6:00 a.m.•58 views

CVE-2026-104678 CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update

0.00168EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/10/07 12:00 a.m.•9 views

CVE-2026-104678: Improper Access Control

2.7CVSS5.9AI score0.00168EPSS

SaveExploits0References2

Positive Technologies•added 2026/10/07 12:00 a.m.•28 views

PT-2026-107406

5.9AI score0.00168EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by