CVE-2024-7624 Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the plugin not properly checking a users capabilities before allowing them to enable access to the plugin's settings through the...

CVE-2018-11580: Improper Neutralization of Input During Web Page Generation

An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. Any logged in user can launch Mass Pages/Posts creation with custom content. There is no nonce or user capability check, so anyone can launch a DoS attack against a site a...

PT-2018-10682

Name of the Vulnerable Software and Affected Versions MULTIDOTS Mass Pages/Posts Creator plugin version 1.2.2 Description An issue in the mass-pages-posts-creator.php file allows any logged-in user to launch Mass Pages/Posts creation with custom content. The lack of nonce or user capability check...