All CVEs — page 307 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows subscribers to escalate their privileges, potentially gaining full control over the JobZilla - Job Board WordPress Theme <= 2.2 instances.
The flaw allows unauthenticated users to escalate privileges to administrative level, which can lead to full system compromise.
The flaw allows unauthenticated users to escalate privileges in Doctreat Core versions 1.7.0 and earlier, enabling unauthorized access and control over the system.
A SQL injection vulnerability in Buddyboss Platform allows authenticated subscribers to execute arbitrary SQL commands, potentially leading to data exposure and privilege escalation. This affects versions up to 3.1.0.
This vulnerability allows unauthenticated users to upload arbitrary files, leading to potential unauthorized access, data compromise, and system control.
Graphina versions 3.1.12 and earlier suffer from unauthenticated broken authentication, allowing attackers to bypass authentication without valid credentials. This vulnerability enables unauthorized access to the application's functionality.
This flaw allows unauthenticated SQL injection in Radius Booking — Booking Calendar for Appointments & Services versions 1.0.19 and earlier, enabling attackers to execute arbitrary SQL commands.
This flaw allows unauthenticated users to escalate privileges, which can lead to full system compromise.
This vulnerability allows an attacker to upload arbitrary files by exploiting a flaw in the file upload mechanism of Workreap Core versions 3.4.5 and earlier, potentially leading to remote code execution or data compromise.
This flaw allows an attacker to upload arbitrary files as a subscriber, potentially leading to remote code execution or data exfiltration.
This vulnerability allows an attacker to upload arbitrary files to a WordPress site using the WP Duplicate plugin, leading to potential remote code execution or data leakage.
The flaw allows unauthenticated users to escalate privileges in Taskbot versions 6.6 and below, enabling unauthorized access and control.
The flaw allows authenticated contributors to delete arbitrary files on the WordPress server by manipulating job parameters, potentially leading to remote code execution or data loss. This affects WordPress versions up to 2.8.2.
This CVE describes an unauthenticated broken access control vulnerability in the PayPlug for WooCommerce plugin, allowing attackers to bypass authentication and potentially modify payment configurations or data without needing valid credentials. This is a high-severity issue because it enables unauthorized access to sensitive payment processing functionality.