Vasyltech

9 CVEs across 2 Vasyltech products. Browse Vasyltech vulnerabilities, severities, and proof-of-concept exploits.

Vasyltech products with known CVEs

ProductCVEs
Advanced Access Manager9
Advanced Access Manager – Access Governance For WordPress1
Vasyltech CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25213Critical9.82024-10-16The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insuffic…
CVE-2024-29127High7.12024-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager allows Reflected XSS.This iss…
CVE-2023-51674Medium6.52024-02-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users &…
CVE-2023-51675Medium4.72023-12-29URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and Mor…
CVE-2023-50881Medium6.52023-12-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users &…
CVE-2021-24830Medium4.82021-11-23The Advanced Access Manager WordPress plugin before 6.8.0 does not escape some of its settings when outputting them, allowing high privilege users to perform C…
CVE-2020-35935High7.52021-01-01The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple…
CVE-2020-35934Medium4.32021-01-01The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/…
CVE-2014-6059High7.22020-01-13WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability