Lucene search
+L

6 matches found

Positive Technologies
Positive Technologies
•added 2026/10/31 12:00 a.m.•5 views

PT-2026-134479

Name of the Vulnerable Software and Affected Versions User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission versions prior to 4.3.14 Description Authenticated users with Subscriber-level access and above can escalate their...

8.8CVSS5.9AI score0.00302EPSS
SaveExploits0References10
attackerkb
attackerkb
•added 2026/08/05 7:39 a.m.•45 views

CVE-2026-4431

The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createpost function in all versions up to, and including, 2.3.0. This is due to the rbsmsubmitpost AJAX action being registered for unauthenticated users via...

9.1CVSS5.9AI score0.00618EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•14 views

PT-2026-68061

Name of the Vulnerable Software and Affected Versions Easy Post Submission versions prior to 2.3.1 Description The plugin allows unauthorized modification of data because the create post function lacks a capability check. The rbsm submit post AJAX action is registered for unauthenticated users vi...

9.1CVSS6AI score0.00618EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/01/02 12:00 a.m.•26 views

WordPress plugin WP User Frontend has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS5.8AI score0.00896EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/11/25 7:28 a.m.•12 views

CVE-2025-12525 Locker Content <= 1.0.0 - Unauthenticated Information Exposure

The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in version 1.0.0 via the 'lockercosubmitpost' AJAX endpoint. This makes it possible for unauthenticated attackers to extract content from posts that has been protected by the plugin...

5.3CVSS5.8AI score0.00314EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•19 views

WordPress plugin Locker Content has a vulnerability related to information leakage.

The WordPress Locker Content plugin is a tool for locking content in WordPress websites, usually by restricting access through email subscriptions, user permissions, etc. An information disclosure vulnerability exists in WordPress Locker Content plugin, which originates from the lockercosubmitpos...

5.3CVSS5.8AI score0.00314EPSS
SaveExploits0References3
Rows per page
Query Builder