Vendor
high
advisory
Privilege Escalation in Consulting Theme for WordPress via Improper Access Control
1 rule 1 TTP 1 CVEThe Consulting theme for WordPress in versions 6.7.16 and earlier contains a vulnerability allowing authenticated users to escalate privileges to administrator by manipulating insecure transient-based authentication mechanisms.
PoC
Consulting
wordpress
web-application
privilege-escalation
1r
1t
1c
high
advisory
Unauthenticated SQL Injection in MasterStudy LMS Plugin
1 rule 1 TTP 1 CVECVE-2024-1512 is an unauthenticated union-based SQL injection vulnerability in the MasterStudy LMS WordPress plugin via the 'user' parameter, allowing remote database compromise.
MasterStudy LMS
wordpress
sqli
web-application
cve-2024-1512
1r
1t
1c