Lucene search
+L

5225 matches found

CNNVD
CNNVD
added 2024/02/29 12:00 a.m.10 views

WordPress Plugin RSS Aggregator by Feedzy Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.6AI score0.00518EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.22 views

WordPress Plugin Login Lockdown Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS6.4AI score0.00393EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.10 views

WordPress Plugin ImageRecycle pdf & image compression security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.00347EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.12 views

WordPress Plugin WPify Woo Czech Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.7AI score0.00455EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/28 11:28 a.m.13 views

CVE-2024-24779 Apache Superset: Improper data authorization when creating a new dataset

Apache Superset with custom roles that include can write on dataset and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apac...

5CVSS6.4AI score
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.8 views

WordPress Plugin Elementor Templates & Widgets for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.7AI score0.00457EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.13 views

WordPress Plugin Coming Soon Page & Maintenance Mode Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.4AI score0.00465EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.10 views

WordPress Plugin Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Disable Json API, Login...

4.3CVSS6.7AI score0.00361EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.6 views

PT-2024-20556

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 3.0.4 Apache Superset versions 3.1.0 through 3.1.0 Description The issue allows users with custom roles that include can write on dataset and without all data access permissions to create virtual datasets to...

6.5CVSS6.4AI score0.00727EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.11 views

WordPress Plugin Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Disable Json API, Login...

6.5CVSS6.7AI score0.00378EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/27 11:15 a.m.7 views

CVE-2024-1652

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxClearCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and...

4.3CVSS7.3AI score0.0034EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.8 views

WordPress Plugin Categorify Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.00202EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.11 views

WordPress Plugin Categorify Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.0034EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.9 views

WordPress Plugin Categorify Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.0034EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.7 views

WordPress Plugin Categorify Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.0034EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.11 views

WordPress Plugin Categorify Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.00204EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/26 4:27 p.m.14 views

CVE-2024-1710

The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the onAjaxAction function action in all versions up to, and including, 1.3.76. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

8.8CVSS5.9AI score0.00684EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/21 6:41 a.m.24 views

CVE-2023-42823

The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data...

5.8AI score0.00425EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2024/02/21 3:36 a.m.32 views

CVE-2024-1562 WooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization

The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the executepostdata function in all versions up to, and including, 1.3.11. This makes it possible for unauthenticated attackers to update plugin...

5.3CVSS5.3AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/21 12:00 a.m.17 views

WordPress Plugin Simple Job Board Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.8AI score0.00909EPSS
SaveExploits0References3
Rows per page
Query Builder