VA
Vendor
Vasyltech
10
CVEs
0
On KEV
0
New 30D
Products
AA8.8
Advanced Access Manager
Vasyltech
9 CVEs0 on KEV0 new
AA7.5
Advanced Access Manager – Access Governance for WordPress
vasyltech
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-25213 | AA Advanced Access Manager – Access Governance for WordPress vasyltech | 7.5 | Oct 16 | Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read |
| CVE-2024-29127 | AA Advanced Access Manager Vasyltech | 6.1 | Mar 19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager allows Reflected XSS.This issue affects Advanced… |
| CVE-2023-51674 | AA Advanced Access Manager Vasyltech | 5.4 | Feb 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced… |
| CVE-2023-51675 | AA Advanced Access Manager Vasyltech | 5.4 | Dec 29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects… |
| CVE-2023-50881 | AA Advanced Access Manager Vasyltech | 5.4 | Dec 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced… |
| CVE-2021-24830 | AA Advanced Access Manager Vasyltech | 4.8 | Nov 23 | The Advanced Access Manager WordPress plugin before 6.8.0 does not escape some of its settings when outputting them, allowing high privilege users to perform Cross-Site Scripting… |
| CVE-2020-35935 | AA Advanced Access Manager Vasyltech | 8.8 | Jan 1 | The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple Role support is… |
| CVE-2020-35934 | AA Advanced Access Manager Vasyltech | 4.3 | Jan 1 | The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or… |
| CVE-2014-6059 | AA Advanced Access Manager Vasyltech | 7.2 | Jan 13 | WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability |