İçeriğe atla
Noroxi

CWE-266 · 1.296 kayıt

Incorrect Privilege Assignment

Bu sınıftaki CVE’ler

1.297 kayıt

  • CVE-2026-48172
    75Bu hafta

    LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %17

    litespeedtech · litespeed cpanel plugin21 May 2026

  • CVE-2025-27007
    60Bu hafta

    WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %54

    brainstorm force · ottokit1 May 2025

  • CVE-2024-28000
    59Planlayın

    WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    litespeedtech · litespeed cache21 Ağu 2024

  • CVE-2025-47539
    47Planlayın

    WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    themewinter · eventin23 May 2025

  • CVE-2026-23550
    45Planlayın

    WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    modular ds · modular ds14 Oca 2026

  • CVE-2022-20759
    44Planlayın

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %28

    cisco · secure firewall threat defense3 May 2022

  • CVE-2025-41115
    44Planlayın

    Incorrect privilege assignment

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    grafana · grafana21 Kas 2025

  • CVE-2025-49388
    41Planlayın

    WordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    kamleshyadav · miraculous core plugin28 Ağu 2025

  • CVE-2024-24882
    40Planlayın

    WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    themegrill · masteriyo17 May 2024

  • CVE-2024-54363
    40Planlayın

    WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    saiful.total · wp nssuser register16 Ara 2024

  • CVE-2026-49060
    40Planlayın

    WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    hippoo · hippoo mobile app for woocommerce11 Haz 2026

  • CVE-2026-27542
    40Planlayın

    WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    rymera web co pty ltd. · woocommerce wholesale lead capture19 Mar 2026

  • CVE-2026-23800
    40Planlayın

    WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    16 Oca 2026

  • CVE-2024-9478
    40Planlayın

    Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue a

    KritikCVSS 10,0İstismar yokEPSS %0

    upkeeper solutions · upkeeper instant privilege access20 Kas 2024

  • CVE-2024-9479
    40Planlayın

    Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue a

    KritikCVSS 10,0İstismar yokEPSS %0

    upkeeper solutions · upkeeper instant privilege access20 Kas 2024

  • CVE-2026-39773
    40Planlayın

    WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    amentotech · doctreat core6 Eki 2026

  • CVE-2026-110372
    39İzleyin

    WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    brainstorm force · ottokit18 Eki 2026

  • CVE-2019-10940
    39İzleyin

    A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1).

    KritikCVSS 9,9İstismar yokEPSS %1

    siemens · sinema server16 Oca 2020

  • CVE-2024-54383
    39İzleyin

    WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    wpwebelite · woocommerce pdf vouchers18 Ara 2024

  • CVE-2024-50485
    39İzleyin

    WordPress Exam Matrix plugin <= 1.5 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    udit rawat · exam matrix29 Eki 2024

  • CVE-2024-50550
    39İzleyin

    WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    litespeedtech · litespeed cache29 Eki 2024

  • CVE-2022-4272
    39İzleyin

    FeMiner wms unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %0

    warehouse management system project · warehouse management system3 Ara 2022

  • CVE-2022-4273
    39İzleyin

    SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %0

    oretnom23 · human resource management system3 Ara 2022

  • CVE-2024-2409
    39İzleyin

    MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action

    KritikCVSS 9,8İstismar yokEPSS %0

    stylemixthemes · masterstudy lms29 Mar 2024

  • CVE-2025-32491
    39İzleyin

    WordPress Rankology SEO – On-site SEO plugin <= 2.2.4 - Privilege Escalation Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    rankology · rankology seo – on-site seo11 Nis 2025

Tüm zafiyet sınıfları