Lucene search
K

6 matches found

CNNVD
CNNVD
added 2024/09/11 12:0 a.m.1 views

WordPress plugin Post Grid and Gutenberg Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.5AI score0.01576EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/09/10 3:3 p.m.3 views

WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.90 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by wesley wcraft in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.2.90...

8.8CVSS7AI score0.01576EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.2 views

PT-2024-38891 · WordPress · Post Grid/Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Post Grid and Gutenberg Blocks plugin for WordPress versions 2.2.87 through 2.2.90 Description: The issue is due to the plugin not properly restricting what user meta values can be updated and ensuring a form is active. This makes it...

8.8CVSS6.5AI score0.01576EPSS
Exploits0References13
Positive Technologies
Positive Technologies
added 2023/03/01 12:0 a.m.3 views

PT-2023-15689 · Sophos · Sophos Connect

Name of the Vulnerable Software and Affected Versions: Sophos Connect versions prior to 2.2.90 Description: An information disclosure issue allows sensitive key material to be included in technical support archives. Recommendations: For Sophos Connect versions prior to 2.2.90, update to version...

5.5CVSS5.3AI score0.00034EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.3 views

Sophos Connect 安全漏洞

Sophos Connect is a VPN client from Sophos UK. A security vulnerability exists in Sophos Connect version 2.2.90 and prior versions, which stems from an information disclosure vulnerability in the technical support archive. An attacker could exploit the vulnerability to obtain sensitive key materi...

5.5CVSS5.8AI score0.00034EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.1 views

Sophos Connect 跨站请求伪造漏洞

Sophos Connect is a VPN client from Sophos UK. A security vulnerability exists in Sophos Connect version 2.2.90 and prior versions. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

4.3CVSS5AI score0.00106EPSS
Exploits0References2
Rows per page
Query Builder