sales@hackhalt.com

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total4
Critical0
High0
Medium4
Reset
Showing 1-4 of 4 records
Threat Entry Updated 2026-06-17

Apply Online - Broken Access Control (CVE-2023-46080)

Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ApplyOnline – Application Form Builder and Manager: from n/a through 2.5.3.

PLUGIN Apply Online

CVE-2023-46080

MEDIUM CVSS 4.3 2025-01-02
Threat Entry Updated 2026-06-17

Apply Online - Broken Access Control (CVE-2024-2036)

The ApplyOnline – Application Form Builder and Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the aol_modal_box AJAX action in all versions up to, and including, 2.6.2. This makes it possible for authenticated attackers, with subscriber access or higher, to view Application submissions.

PLUGIN Apply Online

CVE-2024-2036

MEDIUM CVSS 4.3 2024-05-22