All CVEs — page 334 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows unauthenticated attackers to delete arbitrary files, potentially leading to remote code execution.
The WPCafe WordPress plugin contains a Local File Inclusion vulnerability that allows authenticated users with contributor-level access or higher to include and execute arbitrary PHP files on the server. This can lead to full code execution and data compromise.
The flaw allows authenticated attackers with subscriber-level access to inject SQL queries, potentially leading to the extraction of sensitive information from the database.
The Simple Membership plugin allows unauthenticated attackers to hijack member account activations by redirecting activation emails to attacker-controlled addresses, potentially gaining unauthorized access to user accounts without their consent.