Lucene search
+L

1145 matches found

RedhatCVE
RedhatCVE
•added 2025/10/25 8:29 a.m.•26 views

CVE-2025-11887

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...

4.3CVSS5.1AI score0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/25 12:00 a.m.•18 views

WordPress plugin Supervisor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.3AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/24 8:23 a.m.•29 views

CVE-2025-11887 Supervisor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...

4.3CVSS0.00201EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/24 8:23 a.m.•20 views

EUVD-2025-35819

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...

4.3CVSS4.7AI score0.00201EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/24 8:23 a.m.•12 views

CVE-2025-11887 Supervisor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...

4.3CVSS5.7AI score0.00201EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/24 8:23 a.m.•44 views

CVE-2025-11887

Summary (CVE-2025-11887) : The WordPress Supervisor plugin (versions ≤ 1.3.2) is vulnerable to unauthorized modification of data due to a missing capability check across several AJAX endpoints. authenticated attackers with Subscriber-level access or higher can update plugin settings. The vulnerab...

4.3CVSS5.7AI score0.00201EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/24 12:00 a.m.•19 views

PT-2025-43594

Name of the Vulnerable Software and Affected Versions WordPress Supervisor Plugin versions up to and including 1.3.2 Description The Supervisor plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check in multiple AJAX functions. Authenticate...

4.3CVSS5.8AI score0.00201EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/24 12:00 a.m.•3 views

CVE-2025-11887: Missing Authorization

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...

4.3CVSS5.6AI score0.00201EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/23 10:37 p.m.•16 views

WordPress Supervisor plugin <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Update vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Supervisor versions = 1.3.2...

4.3CVSS6.7AI score0.00201EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2025/10/08 7:56 a.m.•196 views

HEVD

SMEP & kASLR Bypassing - HEVD x86 Kernel Exploit !Alt text...

7.1AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-1999-0430

Malware in sbrugna...

5CVSS6.4AI score0.01858EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2018-10738

Malware in sbrugna...

5CVSS5.7AI score0.00828EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-19244

Malware in sbrugna...

5.3CVSS5.5AI score0.00295EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2018-19242

Malware in sbrugna...

5.3CVSS5.5AI score0.00357EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-19246

Malware in sbrugna...

5.3CVSS5.5AI score0.00337EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2018-10737

Malware in sbrugna...

7.3CVSS7.7AI score0.01499EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-10735

Malware in sbrugna...

8.8CVSS8.6AI score0.02395EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-9648

Malware in sbrugna...

4.3CVSS4.5AI score0.00891EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-19251

Malware in sbrugna...

7.2CVSS6.9AI score0.00425EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2013-1253

Malware in sbrugna...

5CVSS6.4AI score0.01753EPSS
SaveExploits0References2
Rows per page
Query Builder