All CVEs — page 474 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows unauthenticated attackers to disclose other customers' order tokens and manipulate bookings, leading to potential data breaches and unauthorized access.
The Customer Reviews for WooCommerce plugin allows unauthenticated attackers to delete arbitrary attachments from the Media Library by exploiting a lack of proper authorization checks.
A Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows attackers to forge requests that the victim has authorized, potentially leading to unauthorized actions on the victim's behalf.
The flaw allows unauthenticated attackers to escalate privileges by exploiting a missing permission enforcement and a lack of key allowlist, leading to the ability to register an account with administrator role and gain full administrative access.
The flaw allows unauthorized access to administrative functions through the phpIPAM API, posing a significant security risk.