All CVEs — page 1177 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw in Dell OpenManage Server Administrator prior to version 11.1.0.3 allows a low-privileged attacker to tamper with information and gain unauthorized access, posing a significant security risk.
The flaw is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Xagio SEO versions 7.1.0.43 and earlier, allowing attackers to perform unauthorized actions on behalf of authenticated users without their consent.
A SQL injection vulnerability exists in the MC Woocommerce Wishlist plugin versions up to 1.9.21, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers who have gained admin access to escalate their privileges or manipulate database contents.
A SQL injection vulnerability in PublishPress Series plugin allows authenticated administrators to execute arbitrary SQL commands, potentially leading to full database compromise and unauthorized access to sensitive content.
A SQL injection vulnerability in WP-Lister Lite for eBay allows authenticated shop managers to execute arbitrary database queries, potentially leading to data exposure or manipulation. This is particularly concerning because shop managers typically have elevated privileges within e-commerce platforms.
A SQL injection vulnerability exists in SKT Addons for Elementor plugin versions up to 4.0, allowing authenticated attackers with high privileges to execute arbitrary SQL commands on the database server.
A SQL injection vulnerability exists in WC Vendors Marketplace plugin versions up to 2.7.2.1, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers with admin credentials to manipulate the database directly, potentially leading to data theft, privilege escalation, or unauthorized modifications.
A SQL injection vulnerability in WPMasterToolKit plugin allows authenticated administrators to execute arbitrary SQL commands, potentially leading to full database compromise and unauthorized access to sensitive data.
A SQL injection vulnerability in the Newsletters plugin allows authenticated administrators to execute arbitrary database queries, potentially leading to full system compromise. This affects versions 4.18 and earlier.
A SQL injection vulnerability exists in WP Maps plugin versions up to 4.9.9, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers who have gained admin access to escalate their privileges or manipulate database content.
This flaw allows SQL injection in the Product Feed Manager, enabling attackers to execute arbitrary SQL commands, potentially leading to data theft or corruption.