WordPress Uix UserCenter plugin <= 1.0.3 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by moonge in WordPress Plugin Uix UserCenter versions = 1.0.3...

CVE-2026-16259

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...

EUVD-2026-68042

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...

CVE-2026-16259

The Uix UserCenter WordPress plugin (versions through 1.0.3 ) contains an unauthenticated privilege escalation vulnerability. The flaw exists because the plugin fails to verify account ownership during unauthenticated profile-update actions and utilizes a hardcoded signing key that is identical a...

CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...

CVE-2026-16259 Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...

PT-2026-83394

Name of the Vulnerable Software and Affected Versions Uix UserCenter versions prior to 1.0.4 Description The Uix UserCenter WordPress plugin fails to verify if the account being modified during an unauthenticated profile-update action belongs to the requester. The process uses a token for...

CVE-2026-16259: Improper Privilege Management

The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requester, and it authenticates that action with a token whose signing key is hardcoded and identical across every install, allowing...

EUVD-2024-17348

Malicious code in bioql PyPI...

CVE-2024-1608

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction...

CVE-2024-1608

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction...

Design/Logic Flaw

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction...

CVE-2024-1608

The CVE affects OPPO Usercenter Credit SDK. The vulnerability is a privilege escalation caused by a loose permission check in the SDK, which can lead to an internal information leak without user interaction. Public details consistently describe the issue but do not specify affected versions, vuln...

CVE-2024-1608 OPPO Usercenter Credit sdk

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction...

CVE-2024-1608 OPPO Usercenter Credit sdk

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction...

PT-2024-18168 · Oppo · Oppo Usercenter Credit Sdk

Name of the Vulnerable Software and Affected Versions: OPPO Usercenter Credit SDK affected versions not specified Description: The issue is related to a possible escalation of privilege due to loose permission check in the OPPO Usercenter Credit SDK. This could lead to an application internal...

CVE-2024-1608: Improper Handling of Insufficient Permissions or Privileges

In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application internal information leak w/o user interaction...

OPPO Usercenter Credit SDK Security Vulnerability

OPPO Usercenter Credit SDK is a software development toolset for user credit centers from OPPO Guangdong Mobile Communications OPPO, China. A security vulnerability exists in OPPO Usercenter Credit SDK, which stems from lax privilege checking, resulting in an elevation of privilege vulnerability...

SiteServer 3.6.4 /UserCenter/Platform/user.aspx SQL注入漏洞

No description provided by source...

SiteServer CMS UserCenter/login. aspx page the user name at sql injection-vulnerability warning-the black bar safety net

After testing spike the latest of the 3. Version 5 stieserver official website:www. siteserver. cn EXP: Direct access to the UserCenter/login. aspx The username at the input: 1 2 3'insert into bairongAdministratorUserName,Password,PasswordFormat,PasswordSalt...