All CVEs — page 1159 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows authenticated attackers with contributor-level access or higher to modify or delete arbitrary WordPress posts by exploiting a nonce on the admin screen, which can lead to unauthorized data changes or deletions.
This vulnerability allows remote authenticated users to write arbitrary files, potentially leading to denial-of-service conditions.
This vulnerability allows remote authenticated users to inject CRLF sequences, enabling them to read or write arbitrary files and perform denial-of-service attacks. It is a high-risk flaw due to its potential for significant data manipulation and system disruption.