All CVEs — page 503 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A SQL injection vulnerability in Easy Digital Downloads plugin allows authenticated shop managers to execute arbitrary database queries, potentially leading to data exposure or manipulation. This is particularly concerning because shop managers often have elevated privileges within e-commerce systems.
The flaw is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in PublishPress Capabilities versions up to 2.50.1, allowing attackers to perform actions on behalf of authenticated users without their consent.
A SQL injection vulnerability in the Email Log plugin allows authenticated administrators to execute arbitrary SQL commands, potentially leading to full database access and data compromise. This is particularly dangerous because it requires only administrator-level access to exploit.
This flaw allows SQL injection, enabling an attacker to execute arbitrary SQL commands, potentially leading to data theft or corruption.