Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Farhan Noor Clear all filters
TI-2025-16603 CVE-2025-22721 · GHSA-qw9x-8r88-2mfq

WordPress ApplyOnline plugin <= 2.6.7.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Farhan Noor ApplyOnline apply-online allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ApplyOnline: from n/a through <= 2.6.7.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2025-01-21 No fix listed CWE-862
TI-2023-24733 CVE-2023-46080 · GHSA-w4m2-8qxq-h2wj

WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ApplyOnline – Application F…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00423 Published 2025-01-02 No fix listed CWE-862
TI-2024-01895 CVE-2024-2036 · GHSA-ww7g-fw5c-855v

ApplyOnline – Application Form Builder and Manager <= 2.6.2 - Missing Authorization to Sensitive Information Exposure

Priority LOW 20

The ApplyOnline – Application Form Builder and Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the aol_modal_box AJAX action in all versions up to, and inclu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00369 Published 2024-05-22 No fix listed CWE-862