All CVEs — page 553 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows authenticated attackers with subscriber-level access to execute arbitrary shortcodes, potentially leading to remote code execution.
The flaw allows remote code execution due to missing authorization checks and the use of eval() in the 'savesection' handler of the Welcomizer plugin for WordPress, posing a significant security risk.