All CVEs — page 635 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The flaw in Dell OpenManage Server Administrator prior to version 11.1.0.3 allows a low-privileged attacker to tamper with information and gain unauthorized access, posing a significant security risk.
The flaw is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Xagio SEO versions 7.1.0.43 and earlier, allowing attackers to perform unauthorized actions on behalf of authenticated users without their consent.
A SQL injection vulnerability exists in the MC Woocommerce Wishlist plugin versions up to 1.9.21, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers who have gained admin access to escalate their privileges or manipulate database contents.
A SQL injection vulnerability in PublishPress Series plugin allows authenticated administrators to execute arbitrary SQL commands, potentially leading to full database compromise and unauthorized access to sensitive content.
A SQL injection vulnerability in WP-Lister Lite for eBay allows authenticated shop managers to execute arbitrary database queries, potentially leading to data exposure or manipulation. This is particularly concerning because shop managers typically have elevated privileges within e-commerce platforms.
A SQL injection vulnerability exists in SKT Addons for Elementor plugin versions up to 4.0, allowing authenticated attackers with high privileges to execute arbitrary SQL commands on the database server.
A SQL injection vulnerability exists in WC Vendors Marketplace plugin versions up to 2.7.2.1, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers with admin credentials to manipulate the database directly, potentially leading to data theft, privilege escalation, or unauthorized modifications.
A SQL injection vulnerability in WPMasterToolKit plugin allows authenticated administrators to execute arbitrary SQL commands, potentially leading to full database compromise and unauthorized access to sensitive data.