Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total2
Critical2
High0
Medium0
Reset
Showing 1-2 of 2 records
Threat Entry Updated 2025-02-13

CVE-2024-13182 - Wp Directorybox Manager Plugin

The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_parse_request' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator.

PLUGIN Wp Directorybox Manager

CVE-2024-13182

CRITICAL CVSS 9.8 2025-02-13
Threat Entry Updated 2025-02-08

CVE-2025-0316 - Wp Directorybox Manager Plugin

The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_enquiry_agent_contact_form_submit_callback' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.

PLUGIN Wp Directorybox Manager

CVE-2025-0316

CRITICAL CVSS 9.8 2025-02-08
Scroll to top