Lucene search
+L

6 matches found

NVD
NVD
•added 2026/05/20 2:16 a.m.•38 views

CVE-2026-7467

The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7. This is due to the 'RadMoreAjax::importData' function not restricting which database tables can be written to during import and not properly validating the imported...

8.8CVSS0.01557EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/20 1:25 a.m.•62 views

CVE-2026-7467 Read More & Accordion <= 3.5.7 - Privilege Escalation via importData

The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7. This is due to the 'RadMoreAjax::importData' function not restricting which database tables can be written to during import and not properly validating the imported...

8.8CVSS0.01557EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•1 views

CVE-2026-7467: Improper Privilege Management

The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7. This is due to the 'RadMoreAjax::importData' function not restricting which database tables can be written to during import and not properly validating the imported...

8.8CVSS5.7AI score0.01557EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/18 5:33 a.m.•114 views

CVE-2025-0318

The CVE-2025-0318 entry concerns the WordPress plugin Ultimate Member (versions up to and including 2.9.1). According to connected records, the vulnerability is an Information Exposure flaw that allows unauthenticated attackers to exfiltrate data from the wp_usermeta table due to differing error ...

5.3CVSS6.9AI score0.00355EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/18 12:00 a.m.•0 views

CVE-2025-0318: Exposure of Sensitive Information to an Unauthorized Actor

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.9.1 through different error messages in the responses. This makes it possible for...

5.3CVSS5.7AI score0.00355EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/18 12:00 a.m.•11 views

WordPress plugin Ultimate Member 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. An information disclosure...

5.3CVSS7.8AI score0.00355EPSS
SaveExploits0References3
Rows per page
Query Builder