All CVEs — page 1142 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows unauthenticated users to perform SQL injection attacks due to insufficient parameter sanitization in the VikRentItems plugin before 1.2.4, potentially leading to data compromise.
The flaw allows unauthenticated users to update settings in the Master Blocks WordPress plugin, leading to Stored XSS that can be executed in the session of any administrator visiting a wp-admin page.
The flaw in UsersWP 1.5.0 to 1.5.9 allows unauthenticated attackers to log in as any user by asserting ownership of an email address through a social login provider, potentially compromising administrator accounts.
This flaw allows unauthenticated users to update WordPress options and store executable scripts, leading to potential full site takeover and privilege escalation.
The flaw allows unauthenticated attackers to inject JavaScript into the page title, potentially leading to cross-site scripting (XSS) attacks.
The flaw allows any authenticated user to configure the Unbounce Landing Pages plugin to serve arbitrary content from a host they control, leading to potential data leakage and unauthorized access.