Privilege escalation.

Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter

• wpcodefactory Customer Email Verification for WooCommerce
• Privilege escalation

containerd CRI plugin: Checkpoint restore bypasses destination security context

• Privilege escalation

>=2.1.0, <2.2.7 || >=2.3.0, <2.3.4 · fixed in 2.2.7, 2.3.4

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

• Privilege escalation
• Server-side request forgery (SSRF)

<=1.5.0 · no fixed version yet

Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods

• Privilege escalation
• Broken access control

<3.10.0 · fixed in 3.10.0

WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability

• Shabti Kaplan Frontend Admin by DynamiApps
• Privilege escalation

Improper privilege management in Eclipse Foundation Eclipse Connected Services Platform

• Eclipse Foundation Eclipse Connected Services Platform
• Privilege escalation
• Broken access control

WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

• WP ManageNinja LLC Fluent CRM
• Privilege escalation

WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'

• wpxpo WholesaleX – All-in-One B2B Solution with Wholesale Pricing
• Privilege escalation

WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

• WP ManageNinja LLC Fluent CRM
• Privilege escalation

An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64

• Mitsubishi Electric Corporation GENESIS64
• Mitsubishi Electric Iconics Digital Solutions GENESIS64
• Privilege escalation

User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler

• User Rights Access Manager
• Privilege escalation

util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass

• util-linux
• Privilege escalation
• CWE-807

Gitea repository ownership escalation by administrators

• Gitea
• Privilege escalation

Gitea API token scope escalation through HTTP signatures

• Gitea
• Privilege escalation
• Broken access control

Gitea organization team policy bypass through repository API

• Gitea
• Privilege escalation
• Broken access control

MyReport Updater through 2.1.1 Local Privilege Escalation via Updater Service

• Report One MyReport Updater
• Privilege escalation

WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability

• M A Vinoth Kumar Frontend Dashboard
• Privilege escalation

Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution

• Red Hat OpenShift Container Platform 4.19
• Red Hat OpenShift Container Platform 4.20
• Privilege escalation

SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register

• wpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications
• Privilege escalation

Membership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache

• davefx Membership & User Roles for WooCommerce (Automatic Role Changer)
• Privilege escalation

Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data

• bitpressadmin Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation
• Privilege escalation

Execution with unnecessary privileges in Google Chrome

• Google Chrome
• Privilege escalation

Visual Studio Code Security Feature Bypass Vulnerability

• Microsoft Visual Studio Code
• Privilege escalation

Microsoft Office SharePoint Elevation of Privilege Vulnerability

• Microsoft SharePoint Server Subscription Edition
• Privilege escalation
• CWE-1287

Microsoft Office SharePoint Elevation of Privilege Vulnerability

• Microsoft SharePoint Server Subscription Edition
• Privilege escalation

Windows Host Guardian Service Tampering Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Privilege escalation

Docker Hub account conversion could reassign an active personal access token to another user

• Docker Hub
• Privilege escalation

SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization

• SourceCodester Simple Cafe Billing System
• Privilege escalation
• Broken access control

Huawei openUBMC low-privilege SNMP to administrator privilege escalation

• Huawei openBMC
• Privilege escalation

Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions

• Colorful iGameCenter
• Privilege escalation

Execution with unnecessary privileges in NVIDIA AIStore framework

• NVIDIA AIStore framework
• Privilege escalation

Privilege escalation in the WebExtensions component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Panning and Zooming component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the WebExtensions component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Application Update component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Siemens SIMATIC WinCC V7.5: A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions)…

• Siemens SIMATIC WinCC V7.5
• Siemens SIMATIC WinCC V8.0
• Privilege escalation

calcom cal.com/cal.diy Credentials delete credentials.delete privileges management

• calcom cal.com
• calcom cal.diy
• Privilege escalation

The macOS version of the DigiD app is not signed with Hardened Runtime

• Logius DigiD for macOS
• Privilege escalation

Incorrect Privilege Assignment in GitLab

• GitLab
• Privilege escalation

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component

• Privilege escalation

IBM i is Affected By An Improper Privilege Management Vulnerability

• i
• Privilege escalation

IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges

• IBM Aspera Enterprise WebApps
• Privilege escalation

Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creation

• frappe erpnext
• Privilege escalation

Frappe before 15.41.0 Privilege Escalation via Document Action

• frappe
• Privilege escalation

IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management

• IBM Maximo Application Suite - Location Service for Esri Component
• Privilege escalation

Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Component

• zofe rapyd-admin
• Privilege escalation

1024-lab smart-admin Support Config Query queryByKey access control

• 1024-lab smart-admin
• Privilege escalation
• Broken access control

IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management

• IBM Db2
• Privilege escalation

IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance

• IBM Db2
• Privilege escalation

IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility

• IBM Db2
• Privilege escalation

Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grants

• getgrav grav-plugin-api
• Privilege escalation

Improper privilege management in Progress MarkLogic Server backup and restore operations

• Progress Software Corporation MarkLogic Server
• Privilege escalation

Improper privilege management in Progress MarkLogic Server xdmp:eval-in

• Progress Software Corporation MarkLogic Server
• Privilege escalation

Improper privilege management in Progress MarkLogic Server higher-order XQuery functions

• Progress Software Corporation MarkLogic Server
• Privilege escalation

Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio

• Progress Software Corporation MarkLogic Server
• Path traversal
• Privilege escalation

Improper privilege management in Progress MarkLogic Server REST extensions

• Progress Software Corporation MarkLogic Server
• Privilege escalation

Improper privilege management in Progress MarkLogic Server Management API

• Progress Software Corporation MarkLogic Server
• Privilege escalation

Improper privilege management in Progress MarkLogic Server forest operations

• Progress Software Corporation MarkLogic Server
• Privilege escalation

tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization

• tobychui zoraxy
• Privilege escalation
• Broken access control