CVE Vulnerability Catalog

The Easy Elements for Elementor plugin for WordPress up to version 1.4.5 contains a privilege escalation vulnerability in the easyel_handle_register() function. An unauthenticated attacker can register a new account with full administrator privileges by supplying custom_meta[wp_capabilities][administrator]=1 in an AJAX request.

The WP ERP Pro plugin for WordPress in all versions up to and including 1.5.1 is vulnerable to SQL injection via the 'search_key' parameter. This is due to insufficient escaping and preparation of the SQL query, allowing unauthenticated attackers to append additional SQL queries to extract sensitive information.

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

The RSA and DSA public key parsers did not enforce size limits on key parameters, allowing a DoS attack by sending a crafted key with an excessively large modulus or DSA parameter. Signature verification could take several minutes.

A path traversal vulnerability has been found in UniFi OS devices that can be exploited by an actor with network access and low privileges. It allows access to files on the underlying system that could be manipulated to obtain sensitive information.

Concrete CMS 9 before 9.5.0 is vulnerable to Cross-Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple(). An attacker can trick an administrator into performing unwanted file operations.

Concrete CMS 9 before 9.5.0 is vulnerable to Cross-Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan(). An attacker can trick an administrator into rescanning a file.

Concrete CMS 9 before 9.5.0 is vulnerable to Cross-Site Request Forgery (CSRF) at concrete/controllers/backend/file star(). An attacker can trick an administrator into starring a file.

Concrete CMS 9 before 9.5.0 is vulnerable to CSRF in the removeFavoriteFolder($id) endpoint. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

Concrete CMS 9 before 9.5.0 is vulnerable to CSRF in the addFavoriteFolder($id) endpoint. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

Concrete CMS 9 before 9.5.0 is vulnerable to CSRF in the reorder endpoint of the Express Association dialog. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

Concrete CMS 9 before 9.5.0 is vulnerable to CSRF in the duplicate endpoint of the Event dialog. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

Concrete CMS 9 before 9.5.0 is vulnerable to CSRF in the design endpoint of the Page Bulk dialog. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

Concrete CMS 9 before 9.5.0 is vulnerable to CSRF in the cache endpoint of the Page Bulk dialog. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

Concrete CMS 9 before 9.5.0 is vulnerable to CSRF in the delete endpoint of the Page Bulk dialog. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

Concrete CMS 9 before 9.5.0 is vulnerable to Cross-Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete. CVSS v4.0: 2.3.

Concrete CMS 9 before 9.5.0 is vulnerable to Cross-Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete. CVSS v4.0: 2.3.

Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view, but the do_update() method does not validate it. An attacker can exploit this to perform a CSRF attack that updates the CMS to an attacker-specified version.

Concrete CMS 9.5.0 and below does not validate CSRF tokens for requests to /dashboard/extend/update/prepare_remote_upgrade/<remoteMPID>. An attacker controlling a remote package can overwrite PHP files and force execution of the upgrade() method, leading to remote code execution.

Concrete CMS 9.5.0 and below has a CSRF vulnerability in the install_package() method. An attacker can trick an admin into installing a malicious package, leading to remote code execution.