İçeriğe atla
Noroxi

CWE-266 · 1.169 kayıt

Incorrect Privilege Assignment

Bu sınıftaki CVE’ler

1.173 kayıt

  • CVE-2026-48172
    70Bu hafta

    LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %1

    litespeedtech · litespeed cpanel plugin20 May 2026

  • CVE-2024-28000
    59Planlayın

    WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    litespeedtech · litespeed cache21 Ağu 2024

  • CVE-2025-27007
    55Planlayın

    WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %54

    brainstorm force · ottokit1 May 2025

  • CVE-2025-47539
    47Planlayın

    WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    themewinter · eventin23 May 2025

  • CVE-2026-23550
    46Planlayın

    WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    modular ds · modular ds14 Oca 2026

  • CVE-2025-41115
    44Planlayın

    Incorrect privilege assignment

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    grafana · grafana21 Kas 2025

  • CVE-2022-20759
    43Planlayın

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %28

    cisco · secure firewall threat defense3 May 2022

  • CVE-2025-49388
    41Planlayın

    WordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    kamleshyadav · miraculous core plugin28 Ağu 2025

  • CVE-2024-24882
    40Planlayın

    WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    themegrill · masteriyo17 May 2024

  • CVE-2024-54363
    40Planlayın

    WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    saiful.total · wp nssuser register16 Ara 2024

  • CVE-2026-27542
    40Planlayın

    WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    rymera web co pty ltd. · woocommerce wholesale lead capture19 Mar 2026

  • CVE-2026-23800
    40Planlayın

    WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability

    KritikCVSS 10,0İstismar yokEPSS %1

    16 Oca 2026

  • CVE-2024-9478
    40Planlayın

    Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue a

    KritikCVSS 10,0İstismar yokEPSS %0

    upkeeper solutions · upkeeper instant privilege access20 Kas 2024

  • CVE-2024-9479
    40Planlayın

    Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue a

    KritikCVSS 10,0İstismar yokEPSS %0

    upkeeper solutions · upkeeper instant privilege access20 Kas 2024

  • CVE-2026-49060
    39İzleyin

    WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    hippoo · hippoo mobile app for woocommerce11 Haz 2026

  • CVE-2019-10940
    39İzleyin

    A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1).

    KritikCVSS 9,9İstismar yokEPSS %1

    siemens · sinema server16 Oca 2020

  • CVE-2024-54383
    39İzleyin

    WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    wpwebelite · woocommerce pdf vouchers18 Ara 2024

  • CVE-2024-50485
    39İzleyin

    WordPress Exam Matrix plugin <= 1.5 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    udit rawat · exam matrix29 Eki 2024

  • CVE-2024-50550
    39İzleyin

    WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    litespeedtech · litespeed cache29 Eki 2024

  • CVE-2024-2409
    39İzleyin

    MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

    KritikCVSS 9,8İstismar yokEPSS %1

    stylemixthemes · masterstudy lms29 Mar 2024

  • CVE-2022-4272
    39İzleyin

    FeMiner wms unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %1

    warehouse management system project · warehouse management system3 Ara 2022

  • CVE-2022-4273
    39İzleyin

    SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · human resource management system3 Ara 2022

  • CVE-2025-32491
    39İzleyin

    WordPress Rankology SEO – On-site SEO plugin <= 2.2.4 - Privilege Escalation Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    rankology · rankology seo – on-site seo11 Nis 2025

  • CVE-2024-13421
    39İzleyin

    Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator

    KritikCVSS 9,8İstismar yokEPSS %1

    contempothemes · real estate 712 Şub 2025

  • CVE-2024-56040
    39İzleyin

    WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    vibethemes · vibebp31 Ara 2024

Tüm zafiyet sınıfları