Lucene search
+L

12 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-51687

Malicious code in bioql PyPI...

4.3CVSS7.9AI score0.00334EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/14 6:29 a.m.•21 views

CVE-2024-13601

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS9.1AI score0.00334EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/12 6:15 a.m.•15 views

CVE-2024-13601

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS7.3AI score0.00334EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/12 6:15 a.m.•26 views

CVE-2024-13601

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS0.00334EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/02/12 5:28 a.m.•15 views

CVE-2024-13601 Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS4.4AI score0.00334EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/12 12:00 a.m.•11 views

PT-2025-6445

Name of the Vulnerable Software and Affected Versions Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin versions 1.0.5 and earlier Description The issue is related to Insecure Direct Object Reference. It affects the 'exportusereraserequest' function due to missing validation...

4.3CVSS0.00334EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•17 views

WordPress plugin Majestic Support 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin...

4.3CVSS8.3AI score0.00334EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•11 views

CVE-2024-13601: Authorization Bypass Through User-Controlled Key

The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...

4.3CVSS5.7AI score0.00334EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/07 5:52 p.m.•18 views

CVE-2024-13607

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS6.4AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/04 7:15 a.m.•21 views

CVE-2024-13607

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS0.0042EPSS
SaveExploits0References3
CVE
CVE
•added 2025/02/04 6:41 a.m.•65 views

CVE-2024-13607

CVE-2024-13607 : The WordPress plugin “JS Help Desk – The Ultimate Help Desk & Support Plugin” is vulnerable to Insecure Direct Object Reference via exportusereraserequest in all versions up to and including 2.8.8. Authenticated users with Subscriber-level permissions and above can export ticket ...

4.3CVSS4.3AI score0.0042EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•7 views

PT-2025-2230

Name of the Vulnerable Software and Affected Versions The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress versions up to, and including, 2.8.8 Description The issue is related to Insecure Direct Object Reference, which allows authenticated attackers with Subscriber-lev...

4.3CVSS0.0042EPSS
SaveExploits0References6
Rows per page
Query Builder