Total
3170 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-37929 | 2024-11-01 | N/A | 6.3 MEDIUM | ||
Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4. | |||||
CVE-2024-37411 | 2024-11-01 | N/A | 5.3 MEDIUM | ||
Missing Authorization vulnerability in Team Emilia Projects Progress Planner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Progress Planner: from n/a through 0.9.1. | |||||
CVE-2024-37249 | 2024-11-01 | N/A | 4.3 MEDIUM | ||
Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1. | |||||
CVE-2024-38733 | 2024-11-01 | N/A | 5.4 MEDIUM | ||
Missing Authorization vulnerability in Meks Meks Video Importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meks Video Importer: from n/a through 1.0.12. | |||||
CVE-2024-37444 | 2024-11-01 | N/A | 5.3 MEDIUM | ||
Missing Authorization vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.7.1. | |||||
CVE-2024-39640 | 2024-11-01 | N/A | 6.5 MEDIUM | ||
Missing Authorization vulnerability in QuadLayers WP Social Feed Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 4.3.9. | |||||
CVE-2024-43212 | 2024-11-01 | N/A | 7.5 HIGH | ||
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7. | |||||
CVE-2024-37209 | 2024-11-01 | N/A | 6.5 MEDIUM | ||
Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2. | |||||
CVE-2024-39664 | 2024-11-01 | N/A | 7.3 HIGH | ||
Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: from n/a through 2.8.33. | |||||
CVE-2024-43157 | 2024-11-01 | N/A | 4.3 MEDIUM | ||
Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft: from n/a through 1.2.10. | |||||
CVE-2024-37226 | 2024-11-01 | N/A | 5.3 MEDIUM | ||
Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21. | |||||
CVE-2024-37516 | 2024-11-01 | N/A | 6.3 MEDIUM | ||
Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.2. | |||||
CVE-2024-43122 | 2024-11-01 | N/A | 6.5 MEDIUM | ||
Missing Authorization vulnerability in Creative Motion Robin image optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Robin image optimizer: from n/a through 1.6.9. | |||||
CVE-2024-37483 | 2024-11-01 | N/A | 5.4 MEDIUM | ||
Missing Authorization vulnerability in Post Grid Team by RadiusTheme The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Post Grid: from n/a through 7.7.4. | |||||
CVE-2024-38721 | 2024-11-01 | N/A | 7.1 HIGH | ||
Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through 2.5.0. | |||||
CVE-2024-9361 | 1 Giuliopanda | 1 Bulk Images Optimizer | 2024-11-01 | N/A | 4.3 MEDIUM |
The Bulk images optimizer: Resize, optimize, convert to webp, rename … plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_configuration' function in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin options. | |||||
CVE-2024-50424 | 2024-11-01 | N/A | 6.5 MEDIUM | ||
Missing Authorization vulnerability in Templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through 3.1.5. | |||||
CVE-2024-50423 | 2024-11-01 | N/A | 5.4 MEDIUM | ||
Missing Authorization vulnerability in Templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through 3.1.5. | |||||
CVE-2024-50422 | 2024-11-01 | N/A | 5.3 MEDIUM | ||
Missing Authorization vulnerability in Cloudways Breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through 2.1.14. | |||||
CVE-2024-50428 | 2024-11-01 | N/A | 4.3 MEDIUM | ||
Missing Authorization vulnerability in Mondula GmbH Multi Step Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multi Step Form: from n/a through 1.7.21. |