The BadgeOS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_badgeos_log_entries function in versions up to, and including,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.
Authentication Bypass
WordPress
Badgeos
NVD
VulDB
CVSS 3.1
4.3
EPSS
0.1%
IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be read by a local user. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.
Information Disclosure
IBM
Security Verify Information Queue
NVD
CVSS 3.1
3.3
EPSS
0.1%
Prev
Page 3 of 3