All CVEs — page 533 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows attackers to inject malicious SQL commands through the HashBar WordPress plugin, potentially enabling blind SQL injection attacks that can extract data from the database without direct user interaction.
The flaw allows privilege escalation due to weak configuration in temporary file handling, enabling attackers to gain higher privileges.
The flaw allows privilege escalation due to weak configuration during package extraction, enabling attackers to gain higher privileges than intended.
The flaw allows for privilege escalation via a gRPC server due to an exposed dangerous function, potentially enabling attackers to gain higher privileges.
A flaw in the SocketIO interface allows unauthorized remote code execution due to improper authorization, posing a critical risk.
The VeloCloud Orchestrator (VCO) on-premises version has a critical vulnerability that allows remote attackers to access privileged internal functionality, compromising the confidentiality, integrity, and availability of the orchestrator and its managed data.
The HUSKY – Products Filter for WooCommerce Professional plugin allows unauthenticated attackers to include and execute arbitrary .php files, leading to code execution and potential data compromise.
The flaw allows authenticated attackers with subscriber-level access or higher to execute arbitrary shortcodes, leading to potential unauthorized actions on the WordPress site.