Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Controlled Admin Access WordPress Plugin < = 1.4.0 - Improper Access Control & Privilege Escalation


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: cxsecurity.com

inurl:/wp-content/plugins/controlled-admin-access/ ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Controlled Admin Access Plugin up to 1.5.1 on WordPress customization.php access control


📈 45 Punkte
🕵️ Sicherheitslücken

🕵️ Swape Theme up to 1.2.0 on WordPress Access Control wp-admin/admin-ajax.php xmlPath privilege escalation


📈 34.79 Punkte
🕵️ Sicherheitslücken

🕵️ orbisius-child-theme-creator Plugin up to 1.2.7 on WordPress Access Control admin-ajax.php theme_1/theme_1_file/theme_1_file_contents privilege escalation


📈 32.9 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-4038 | WP Membership Plugin 1.2.3 on WordPress wp-admin/admin-ajax.php access control (ID 132012 / BID-74766)


📈 32.03 Punkte
🕵️ Sicherheitslücken

🕵️ estatik Plugin up to 2.3.0 on WordPress File Upload wp-admin/admin-ajax.php es_media_images[] privilege escalation


📈 30.78 Punkte
🕵️ Sicherheitslücken

🕵️ estatik Plugin up to 2.2.x on WordPress File Upload wp-admin/admin-ajax.php es_media_images[] privilege escalation


📈 30.78 Punkte
🕵️ Sicherheitslücken

🔧 t3n Daily: Adobe &amp;amp; Figma, Ethereum &amp;amp; NFT, Steuer &amp;amp; Homeoffice, KI &amp;amp; Gruselfrau


📈 28.35 Punkte
🔧 Programmierung

🕵️ WordPress weblizar-pinterest-feeds Plugin 1.1.1 Plugin 1.1 wp-admin/admin-ajax.php cross site request forgery


📈 28.03 Punkte
🕵️ Sicherheitslücken

🕵️ WordPress Backup to Dropbox Plugin bis 4.0 auf WordPress wp-admin/admin.php Cross Site Scripting


📈 27.75 Punkte
🕵️ Sicherheitslücken

🕵️ WordPress Backup to Dropbox Plugin up to 4.0 on WordPress wp-admin/admin.php cross site scripting


📈 27.75 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 - "Dashboard Redirect" field Stored Cross-Site Scripting (XSS)


📈 27.6 Punkte
⚠️ PoC

🕵️ Calmar Webmedia Total Donations Plugin up to 2.0.5 on WordPress Access Control migla_ajax_functions.php Request privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ invite-anyone Plugin up to 1.3.15 on WordPress Access Control Email privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ profile-builder Plugin up to 2.1.3 on WordPress Access Control privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ elementor Plugin up to 1.7.x on WordPress Access Control privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ ghost Plugin up to 0.5.5 on WordPress Access Control tools.php privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ optinmonster Plugin up to 1.1.4.5 on WordPress Access Control Shortcode privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ wp-invoice Plugin up to 4.1.0 on WordPress Access Control wpi_twocheckout privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ wp-invoice Plugin up to 4.1.0 on WordPress Access Control wpi_interkassa privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ wp-invoice Plugin up to 4.1.0 on WordPress Access Control wpi_paypal payer privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ wp-invoice Plugin up to 4.1.0 on WordPress Access Control wpi_user_id privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ wp-invoice Plugin up to 4.1.0 on WordPress Access Control admin_init privilege escalation


📈 26.1 Punkte
🕵️ Sicherheitslücken

🕵️ Email Subscribers & Newsletters Plugin up to 4.1.6 on WordPress Subscription wp-admin/admin-ajax.php esfpx_name cross site scripting


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ sola-support-tickets Plugin up to 3.12 on WordPress Access Control /wp-admin cross site scripting


📈 25.24 Punkte
🕵️ Sicherheitslücken

🕵️ responsive-add-ons Plugin up to 2.2.6 on WordPress Access Control admin-ajax.php Request privileges management


📈 25.24 Punkte
🕵️ Sicherheitslücken

📰 20 Critical Security Controls: Control 14 – Controlled Access Based on the Need to Know


📈 25.13 Punkte
📰 IT Security Nachrichten

🕵️ Zendesk: Privilege escalation - Support-Contributor to Support and Product Admin via `/api/v2/██████` . No ADMIN PRIVILEGE required.


📈 25.07 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] WordPress Plugin Admin Menu Tree Page View 2.6.9 - Cross-Site Request Forgery / Privilege Escalation


📈 23.99 Punkte
⚠️ PoC

🕵️ UpdraftPlus Plugin up to 1.13.12 on WordPress admin.php plupload_action name privilege escalation [Disputed]


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ Splashing Images Plugin up to 2.1.0 on WordPress wp-splashing-admin-main.php session privilege escalation


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ Plainview Activity Monitor Plugin 4.7.11 on WordPress admin.php ip privilege escalation


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ WP-jobhunt Plugin up to 2.4 on WordPress AJAX Request admin-ajax.php cs_reset_pass() privilege escalation


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ LifterLMS Plugin up to 3.34.5 on WordPress class.llms.admin.import.php upload_import privilege escalation


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ admin-management-xtended Plugin up to 2.4.0.0 on WordPress wp_ajax privilege escalation


📈 23.99 Punkte
🕵️ Sicherheitslücken

🕵️ dzs-zoomsounds Plugin up to 2.0 on WordPress File Upload admin/upload.php privilege escalation


📈 23.99 Punkte
🕵️ Sicherheitslücken

matomo
•