Lucene search
+L

1013 matches found

CNNVD
CNNVD
added 2024/10/25 12:0 a.m.7 views

WordPress plugin WPS Telegram Chat 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.3AI score0.00267EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/25 12:0 a.m.5 views

WordPress plugin Mapster WP Maps 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization...

8.8CVSS6.5AI score0.00482EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/18 12:0 a.m.4 views

WordPress plugin Bulk images optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.5AI score0.00314EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2024/10/16 7:15 a.m.4 views

CVE-2023-7294

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the createmollieprofile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-leve...

7.1CVSS5.4AI score0.00327EPSS
Exploits0References3
OSV
OSV
added 2024/10/16 7:15 a.m.7 views

CVE-2023-7291

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createmollieaccount function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

8.1CVSS5.8AI score0.00354EPSS
Exploits0References2
NVD
NVD
added 2024/10/16 7:15 a.m.26 views

CVE-2023-7288

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updateprofilepreference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

5.4CVSS0.00272EPSS
Exploits0References2
CVE
CVE
added 2024/10/16 6:43 a.m.51 views

CVE-2023-7294

The CVE concerns the WordPress Paytium: Mollie payment forms & donations plugin. A missing capability check in the create_mollie_profile function affects versions up to 4.3.7, enabling authenticated users with subscriber-level access to modify data by creating a Mollie payment profile. The issue ...

7.1CVSS6.2AI score0.00327EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/10/16 6:43 a.m.30 views

CVE-2023-7294 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the createmollieprofile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-leve...

7.1CVSS0.00327EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/10/16 6:43 a.m.16 views

CVE-2023-7294 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the createmollieprofile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-leve...

7.1CVSS6.7AI score0.00327EPSS
Exploits0References2
CVE
CVE
added 2024/10/16 6:43 a.m.46 views

CVE-2023-7288

The Paytium: Mollie payment forms & donations WordPress plugin is affected up to version 4.3.7 due to a missing capability check in update_profile_preference. This allows authenticated users with subscriber-level access to modify plugin settings, potentially impacting data integrity. Remediation:...

5.4CVSS4.5AI score0.00272EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.9 views

WordPress plugin Paytium: Mollie payment forms & donations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

8.1CVSS6.5AI score0.00354EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.5 views

WordPress plugin Paytium: Mollie payment forms & donations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

5.4CVSS6.4AI score0.00272EPSS
Exploits0References2
OSV
OSV
added 2024/10/15 8:15 p.m.5 views

CVE-2024-21250

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite component: Quality Manager Specification. Supported versions that are affected are 12.2.13-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...

8.1CVSS5.8AI score0.00422EPSS
Exploits0References1
OSV
OSV
added 2024/10/15 8:15 p.m.7 views

AZL-50412 CVE-2024-21247 affecting package mysql for versions less than 8.0.40-1

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

3.8CVSS7.3AI score0.00624EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/10/15 12:0 a.m.5 views

VulnCheck KEV: CVE-2023-7288

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updateprofilepreference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

5.4CVSS5.8AI score0.00272EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.6 views

PT-2024-15275 · WordPress · The Paytium: Mollie Payment Forms & Donations

Name of the Vulnerable Software and Affected Versions: The Paytium: Mollie payment forms & donations plugin for WordPress versions up to, and including, 4.3.7 Description: The issue is related to unauthorized data modification due to a missing capability check on the create mollie profile functio...

7.1CVSS6.9AI score0.00327EPSS
Exploits0References6
OSV
OSV
added 2024/10/10 3:15 a.m.4 views

CVE-2024-9067

The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'deleteattachment' function in all versions up to, and including, 1.3.0. This makes i...

4.3CVSS5.9AI score0.00323EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.5 views

WordPress plugin QA Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.6AI score0.00423EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.2 views

WordPress plugin UserPlus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

7.2CVSS6.3AI score0.00466EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.2 views

WordPress plugin Youzify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.5AI score0.00323EPSS
Exploits0References3
Rows per page
Query Builder