Lucene search
+L

628 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-64249: Missing Authorization

Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protect WP Admin: from n/a through = 4.1...

5.3CVSS5.9AI score0.0033EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•16 views

WordPress plugin Protect WP Admin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.0033EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•18 views

PT-2025-51397

Name of the Vulnerable Software and Affected Versions Protect WP Admin versions through 4.1 Description An authorization issue exists in Protect WP Admin, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Protect WP Admin to a version newer tha...

6.6AI score0.0033EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/12/15 1:30 p.m.•15 views

WordPress Protect WP Admin plugin <= 4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Protect WP Admin versions = 4.1...

4.8CVSS7AI score0.0033EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•1 views

CVE-2025-12173: Cross-Site Request Forgery (CSRF)

The WP Admin Microblog plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the 'wp-admin-microblog' page. This makes it possible for unauthenticated attackers to send messages on beha...

4.3CVSS5.5AI score0.00124EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/07 5:33 p.m.•16 views

CVE-2025-58595

Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...

9.1CVSS6.9AI score0.00342EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/06 4:15 p.m.•19 views

CVE-2025-58595

Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...

9.1CVSS0.00342EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:54 p.m.•28 views

CVE-2025-58595 WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...

5.3CVSS0.00342EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•20 views

PT-2025-45243

Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...

6.9AI score0.00342EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•1 views

CVE-2025-58595: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...

5.3CVSS5.8AI score0.00342EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•3 views

CVE-2025-11171: Missing Authentication for Critical Function

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

5.3CVSS6AI score0.00407EPSS
SaveExploits3References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2019-19265

Malware in sbrugna...

6.1CVSS6.3AI score0.01389EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2015-9241

Malware in sbrugna...

4.8CVSS5.2AI score0.01033EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-0207

Malware in sbrugna...

5CVSS6.2AI score0.0331EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2015-9238

Malware in sbrugna...

8.8CVSS8.6AI score0.01944EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2016-1980

Malware in sbrugna...

8.8CVSS8.6AI score0.00911EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2009-2844

Malware in sbrugna...

6.4CVSS6.1AI score0.02276EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2008-6727

Malware in sbrugna...

10CVSS6.1AI score0.04584EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2006-0989

Malware in sbrugna...

5CVSS6.1AI score0.03282EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2015-9240

Malware in sbrugna...

8.8CVSS8.6AI score0.01944EPSS
SaveExploits1References4
Rows per page
Query Builder