All CVEs — page 366 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in colmux in collectl before 4.3.20.2 allows a local user to inject escape sequences into the terminal of an operator, potentially leading to unauthorized control of the terminal session.
The LearnPress WordPress plugin has an insecure direct object reference vulnerability that allows unauthenticated attackers to access course materials from paid or enrollment-required courses by exploiting a public AJAX endpoint. This occurs because the system uses two separate identifiers for authorization and data retrieval without properly validating that the lesson belongs to the authorized course.
The Ultimate Multisite plugin for WordPress allows unauthenticated attackers to bypass authentication and log in as any existing user, including Network Super Admins, by exploiting a flaw in the `checkout_form` parameter.
The ByteCoreStack – MCP Connector for AI Tools plugin allows authenticated attackers with Subscriber-level access to escalate their privileges to Administrator by exploiting a vulnerability in the `wp_update_user_meta` function.
The flaw allows unauthenticated attackers to register a new account with the Administrator role by exploiting the Super Forms – Drag & Drop Form Builder plugin's lack of proper role validation.
This flaw allows an unauthenticated remote attacker to read or overwrite arbitrary files on the device by exploiting improperly validated file paths in BACnet File Objects, leading to potential full system compromise.
The Hubtel WordPress plugin creates a debug log file that contains payment gateway API credentials in plain text, but fails to restrict public access to this file. This allows unauthenticated attackers to download the log and extract sensitive credentials without any authentication or authorization.
The flaw is a SQL injection vulnerability in the Pro Like Button WordPress plugin before 2.0, allowing unauthenticated users to inject malicious SQL queries and potentially gain unauthorized access to the database.