CWE-862

8,346 vulnerabilities with CWE-862

CVE-2024-13677 HIGH

GetBookingsWP <= 1.1.27 - Authenticated Privilege Escalation via Email Update

CVSS 8.8

CVE-2024-13439 MEDIUM

Team Members Showcase Plugin <4.4.9 - Auth Bypass

CVSS 4.3

CVE-2024-13752 MEDIUM

WP Project Manager < 2.6.18 - Authenticated Persistent Denial of Service via Settings Notice Endpoint

CVSS 6.5

CVE-2024-13513 CRITICAL

Oliver POS <= 2.4.2.3 - Unauthenticated Sensitive Information Exposure via Logging

CVSS 9.8

CVE-2024-52500 HIGH

Monetag Official Plugin <1.1.3 - Info Disclosure

CVSS 7.2

CVE-2024-13639 MEDIUM

Read More & Accordion < 3.4.2 - Authenticated Arbitrary Post Deletion via expmDeleteData()

CVSS 4.3

CVE-2024-13229 MEDIUM

Rank Math SEO - AI SEO Tools <1.0.235 - Info Disclosure

CVSS 4.3

CVE-2024-12296 HIGH

Apusthemes Superio < 2.3 - Missing Authorization

CVSS 8.8

CVE-2024-13374 MEDIUM

WP Table Manager <4.1.3 - Info Disclosure

CVSS 4.3

CVE-2024-13800 HIGH

ConvertPlus <= 3.5.30 - Authenticated Denial of Service via cp_dismiss_notice AJAX Endpoint

CVSS 8.1

CVE-2024-13769 MEDIUM

Puzzles < 4.2.5 - Authenticated Stored Cross-Site Scripting via theme_options_ajax_post_action

CVSS 6.4

CVE-2024-13656 HIGH

Click Mag WordPress Theme <= 3.6.0 - Authenticated DoS via Option Deletion

CVSS 8.1

CVE-2024-13654 HIGH

ZoxPress < 2.12.0 - Authenticated Denial of Service via Missing Capability Check on reset_options

CVSS 8.1

CVE-2024-13653 HIGH

ZoxPress - Authenticated Arbitrary Option Update via Missing Capability Check

CVSS 8.8

CVE-2024-12164 MEDIUM

WPSyncSheets Lite For WPForms < 1.6 - Authenticated Settings Reset via Missing Capability Check

CVSS 4.3

CVE-2024-13554 MEDIUM

The Ultimate WordPress Toolkit - WP Extended <= 3.0.13 - Unauthenticated Data Modification via reorder_route() Function

CVSS 5.3

CVE-2024-13541 MEDIUM

aDirectory - WordPress Directory Listing Plugin <= 2.3 - Authenticated Arbitrary Post Deletion via adqs_delete_listing()

CVSS 4.3

CVE-2024-13643 HIGH

Zox News - Professional WordPress News & Magazine Theme <3.17.0 - P...

CVSS 8.8

CVE-2024-3976 MEDIUM

GitLab CE/EE <16.9.7-16.10.5-16.11.2 - Info Disclosure

CVSS 6.5

CVE-2024-1539 MEDIUM

GitLab 15.2-16.9.6, 16.10-16.10.4, 16.11-16.11.1 - Missing Authorization for Banned Group Member Issue Update Disclosure

CVSS 4.3

CVE-2024-13529 MEDIUM

SocialV - Social Network and Community BuddyPress Theme <2.0.15 - I...

CVSS 6.5

CVE-2024-11134 MEDIUM

imithemes Eventer < 3.9.9 - Authenticated Unauthorized Data Access via eventer_export_bookings_csv

CVSS 4.3

CVE-2024-11133 MEDIUM

Eventer WordPress Plugin <= 3.9.9.5 - Unauthenticated Arbitrary Event Ticket Download

CVSS 5.3

CVE-2024-50500 MEDIUM

Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization

CVSS 4.3

CVE-2024-13775 MEDIUM

WooCommerce Support Ticket System <= 17.8 - Authenticated Missing Authorization via AJAX Functions

CVSS 5.4