CVE-2024-9707

CVE-2024-9707 Hunk Companion = 1.8.4 - Отсутствие авторизации, позволяющее неавторизованным пользователям произвольно устанавливать/активировать плагины Описание Плагин Hunk Companion для WordPress уязвим к несанкционированной установке/активации плагинов из-за отсутствия проверки прав доступа в...

EUVD-2025-33847

The Newsup theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the newsupadmininfoinstallplugin function in all versions up to, and including, 5.0.10. This makes it possible for unauthenticated attackers to install the ansar-import plugin...

CVE-2024-10542

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and including, 6.43.2. This makes it possible for...