Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-4003

The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed authorization logic check in the userspnajaxnoprivserver function within the 'userspnformsave' case. The conditional...

9.8CVSS5.8AI score0.00242EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/04/08 7:21 a.m.1 views

WordPress Users manager - PN plugin <= 1.1.15 - Unauthenticated Privilege Escalation via Account Takeover via 'userspn_form_save' AJAX Action vulnerability

WordPress Users manager - PN plugin = 1.1.15 - Unauthenticated Privilege Escalation via Account Takeover via 'userspnformsave' AJAX Action vulnerability discovered by BaroHaf - fpt in WordPress Plugin Users manager – PN versions = 1.1.15...

9.8CVSS5.9AI score0.00242EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/04/08 6:31 a.m.2 views

EUVD-2026-20043

The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed authorization logic check in the userspnajaxnoprivserver function within the 'userspnformsave' case. The conditional...

9.8CVSS6.1AI score0.00242EPSS
Exploits0References13
CVE
CVE
added 2026/04/08 3:36 a.m.3 views

CVE-2026-4003

CVE-2026-4003 affects the WordPress plugin Users manager – PN up to v1.1.15. A flawed authorization path in userspn_ajax_nopriv_server() for the userspn_form_save case allows unauthenticated callers (with a non-empty user_id) to bypass auth checks and call update_user_meta(), enabling arbitrary u...

9.8CVSS6.1AI score0.00242EPSS
Exploits0References12
Vulnrichment
Vulnrichment
added 2026/04/08 3:36 a.m.1 views

CVE-2026-4003 Users manager – PN <= 1.1.15 - Unauthenticated Privilege Escalation via Account Takeover via 'userspn_form_save' AJAX Action

The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed authorization logic check in the userspnajaxnoprivserver function within the 'userspnformsave' case. The conditional...

9.8CVSS6.1AI score0.00242EPSS
Exploits0References12
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.3 views

WordPress plugin Users manager – PN 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.8CVSS5.9AI score0.00242EPSS
Exploits0References12
0day.today
0day.today
added 2010/01/24 12:0 a.m.19 views

linux/x86 ip6tables -F - 47 bytes

Exploit for linux/x86 platform in category shellcode ================================= linux/x86 ip6tables -F - 47 bytes ================================= / Linux x86 - ip6tables -F - 47 bytes Jonathan Salwan The Gnuser Project Gnu Users Manager = http://www.gnuser.org Disassembly of section .tex...

7AI score
Exploits0
Rows per page
Query Builder