All CVEs — page 1141 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows authenticated attackers with subscriber-level access to execute arbitrary shortcodes, potentially leading to remote code execution.
The flaw allows remote code execution due to missing authorization checks and the use of eval() in the 'savesection' handler of the Welcomizer plugin for WordPress, posing a significant security risk.