4 matches found
CVE-2024-5939: Missing Authorization
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'setupwizard' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to read the...
CVE-2024-1322: Missing Authorization
The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'setupwizard' function in all versions up to, and including, 7.8.4. This makes it possible for...
CVE-2019-13560
D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the applysec.cgi setupwizard parameter...
CVE-2019-13560: Undefined Security Weakness
D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the applysec.cgi setupwizard parameter...