cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-4186,https://securityvulnerability.io/vulnerability/CVE-2024-4186,Authentication Bypass Vulnerability in Build App Online WordPress Plugin,"The Build App Online plugin for WordPress is vulnerable to an authentication bypass that impacts versions up to and including 3.0.5. This vulnerability arises from a missing condition to check for a non-empty default value in the 'eb_user_email_verification_key', which allows unauthenticated attackers to gain access as any existing user, including administrators, providing they know the user ID. This exploit can be executed only when the 'Email Verification' setting is enabled. Website owners using this plugin should ensure they have implemented necessary security measures and consider updates to mitigate the risk of unauthorized access.",Wordpress,Edwiser Bridge – WordPress Moodle Lms Integration,9.8,CRITICAL,0.00044999999227002263,false,,false,false,false,,false,false,2024-05-07T05:32:58.532Z,0
CVE-2021-4399,https://securityvulnerability.io/vulnerability/CVE-2021-4399,Cross-Site Request Forgery in Edwiser Bridge for WordPress,"The Edwiser Bridge plugin for WordPress permits Cross-Site Request Forgery due to inadequate nonce validation across several functions, including user data synchronization and admin actions. This serious security oversight could allow unauthenticated attackers to exploit this vulnerability by tricking authorized users, such as site administrators, into executing malicious actions through forged requests.",Wordpress,Edwiser Bridge – WordPress Moodle Lms Integration,4.3,MEDIUM,0.004209999926388264,false,,false,false,false,,false,false,2023-07-01T05:33:26.611Z,0