2 matches found
VulnCheck KEV: CVE-2025-2075
The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...
8.8CVSS8AI score0.02656EPSS
SaveIn wildExploits0References2
CVE-2021-24158
CVE-2021-24158 affects Orbit Fox by ThemeIsle (WordPress plugin). Vulnerability: a registration form feature integrated with Elementor and Beaver Builder allows a lower-privileged user to supply the user_role parameter and set the default role for new registrations, despite the field being hidden...
6.5CVSS6.4AI score0.009EPSS
SaveExploits2References2Affected Software1
20