PT-2026-43574

The WP Promoter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts...

NetAlertX 访问控制错误漏洞

NetAlertX is a network intruder and presence detector from the jokob-sk individual developer. An access control error vulnerability exists in NetAlertX versions prior to 25.4.14 that stems from a bypass of the authentication mechanism and could lead to an unauthorized update of settings...

CVE-2024-3711

CVE-2024-3711 affects the Brizy – Page Builder for WordPress. The flaw enables an unauthorized plugin settings update due to a missing capability check in the functions action_request_disable, action_change_template, and action_request_enable, in all versions up to and including 2.4.43. Consequen...