Lucene search
+L

621 matches found

Cvelist
Cvelist
•added 2024/08/26 4:06 p.m.•33 views

CVE-2024-43289 WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

7.5CVSS0.00447EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/26 4:06 p.m.•20 views

CVE-2024-43289 WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

7.5CVSS6.9AI score0.00447EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/26 12:00 a.m.•18 views

PT-2024-30454 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum versions through 2.3.4 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. It affects the wpForo Forum plugin. Users are urged to upgrade to mitigate risks. Recommendations: For...

7.5CVSS6.4AI score0.00447EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/08/26 12:00 a.m.•16 views

WordPress plugin wpForo Forum 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.4AI score0.00447EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/26 12:00 a.m.•1 views

CVE-2024-43289: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

7.5CVSS5.8AI score0.00447EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/18 10:15 p.m.•42 views

CVE-2024-43288

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

8.1CVSS0.0031EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/08/18 10:15 p.m.•9 views

CVE-2024-43288

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

8.1CVSS5.1AI score0.0031EPSS
SaveExploits0References2
OSV
OSV
•added 2024/08/18 10:15 p.m.•22 views

CVE-2024-43288

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

8.1CVSS5.8AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/18 9:33 p.m.•39 views

CVE-2024-43288 WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

4.3CVSS0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/18 9:33 p.m.•90 views

CVE-2024-43288

CVE-2024-43288 : Authorization Bypass Through User-Controlled Key in wpForo Forum for WordPress; affects wpForo Forum versions n/a–2.3.4. The available documents confirm the high-level impact (authorization bypass) but do not provide exact exploit steps, vendor details, or a remediation/version p...

8.1CVSS4.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/18 9:33 p.m.•24 views

CVE-2024-43288 WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

4.3CVSS7AI score0.0031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/18 12:00 a.m.•28 views

PT-2024-30453 · Unknown · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum versions through 2.3.4 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. The estimated number of potentially affected devices...

8.1CVSS6.8AI score0.0031EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/08/18 12:00 a.m.•15 views

WordPress plugin wpForo Forum 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS6.6AI score0.0031EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/18 12:00 a.m.•1 views

CVE-2024-43288: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

8.1CVSS5.8AI score0.0031EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/08/16 11:03 a.m.•18 views

WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin wpForo Forum versions = 2.3.4...

7.5CVSS7AI score0.00447EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/08/16 11:00 a.m.•29 views

WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin wpForo Forum versions = 2.3.4...

8.1CVSS7AI score0.0031EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/08/16 12:00 a.m.•26 views

WordPress wpForo Forum Plugin <= 2.3.4 is vulnerable to Insecure Direct Object References (IDOR)

Software wpForo Forum Type Plugin Vulnerable versions = 2.3.4 Fixed in 2.3.5 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-43288 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 84baf52495a3 Credits Ananda Dhakal...

8.1CVSS6.5AI score0.0031EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/08/16 12:00 a.m.•20 views

WordPress wpForo Forum Plugin <= 2.3.4 is vulnerable to Sensitive Data Exposure

Software wpForo Forum Type Plugin Vulnerable versions = 2.3.4 Fixed in 2.3.5 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-43289 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID ac5555013147 Credits Ananda Dhakal Patchstack...

7.5CVSS6.6AI score0.00447EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/06/21 4:15 p.m.•16 views

CVE-2022-38055

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This issue affects wpForo Forum: from n/a through 2.0.9...

5.4CVSS5.8AI score0.00272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/21 3:52 p.m.•33 views

CVE-2022-38055 WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This issue affects wpForo Forum: from n/a through 2.0.9...

4.3CVSS6.8AI score0.00272EPSS
SaveExploits0References1
Rows per page
Query Builder