All CVEs — page 306 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
Snapshotify backup plugin exposes sensitive data without authentication in versions up to 1.3.2, allowing attackers to access backup configurations, credentials, and potentially other sensitive information.
The Norvis Backup application exposes sensitive data without requiring authentication, allowing attackers to access backup files and configuration information. This unauthenticated access can lead to data breaches and system compromise.
The Museder RestoreOne backup software has an unauthenticated sensitive data exposure vulnerability that allows attackers to access protected data without needing any credentials. This is particularly concerning because it affects backup functionality where sensitive information is typically stored.
WXD Backup Lite suffers from unauthenticated broken access control that allows attackers to bypass authentication and access protected backup functionality without any credentials. This vulnerability is particularly dangerous because it affects a backup tool that likely handles sensitive data, making unauthorized backups or data exposure possible.
A WordPress backup plugin exposes sensitive data without authentication, allowing attackers to access backup files and configuration information that should be protected. This vulnerability affects versions up to 2.1.2.
A vulnerability allows unauthenticated attackers to inject SQL commands, potentially leading to data breaches or system compromise.
This vulnerability allows unauthenticated attackers to inject PHP objects, leading to potential remote code execution or data manipulation.
A vulnerability in Advanced Posts Listing plugin allows unauthenticated users to bypass access controls and view restricted post listings, potentially exposing sensitive content to unauthorized users.
The flaw is an unauthenticated SQL Injection vulnerability in SendPress Newsletters versions up to 1.26.1.20, allowing attackers to execute arbitrary SQL commands. This matters because it can lead to data breaches and loss of system integrity.
A WooCommerce Multivendor Marketplace REST API with broken access control allows unauthenticated users to access restricted data and functionality, potentially leading to unauthorized data exposure or manipulation.
The flaw allows attackers to bypass authentication mechanisms in Simple JWT Login 4.0.0 versions, posing a significant security risk.
This vulnerability allows unauthenticated attackers to delete arbitrary files, posing a significant risk to data integrity and system security.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or corruption.
A remote code execution vulnerability exists in the Tabs plugin for WordPress versions up to 2.5, allowing attackers to execute arbitrary code on the server with high privileges. This represents a critical security flaw that can lead to complete server compromise.