Vulnerabilities > Authentication Bypass Using an Alternate Path or Channel

DATE CVE VULNERABILITY TITLE RISK
2024-10-26 CVE-2024-9931 The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0.
network
low complexity
CWE-288
critical
 9.8
9.8
2024-10-16 CVE-2024-9893 The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.1.14.
network
low complexity
CWE-288
critical
 9.8
9.8
2024-10-16 CVE-2024-9105 The UltimateAI plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.8.3.
network
low complexity
CWE-288
critical
 9.8
9.8
2024-10-11 CVE-2024-9822 Authentication Bypass Using an Alternate Path or Channel vulnerability in Pedalo Connector
The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5.
network
low complexity
pedalo CWE-288
critical
 9.8
9.8
2024-10-08 CVE-2024-8943 The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12.
network
low complexity
CWE-288
critical
 9.8
9.8
2024-10-01 CVE-2024-9106 The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0.
network
low complexity
CWE-288
critical
 9.8
9.8
2024-07-18 CVE-2024-5620 Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass.This issue affects Apinizer Management Console: before 2024.05.1.
network
low complexity
CWE-288
6.5
6.5
2023-10-11 CVE-2023-4957 Authentication Bypass Using an Alternate Path or Channel vulnerability in Zebra Zt410 Firmware
A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer.
low complexity
zebra CWE-288
4.3
4.3
2023-09-19 CVE-2023-42793 Authentication Bypass Using an Alternate Path or Channel vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
network
low complexity
jetbrains CWE-288
critical
 9.8
9.8
2023-09-14 CVE-2023-4702 Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas
Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass.This issue affects Digital Yepas: before 1.0.1.
network
low complexity
yepas CWE-288
critical
 9.8
9.8