CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-50506 – WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Privilege Escalation vulnerability
https://notcve.org/view.php?id=CVE-2024-50506
28 Oct 2024 — Incorrect Privilege Assignment vulnerability in Azexo Marketing Automation by AZEXO allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. La vulnerabilidad de asignación incorrecta de privilegios en Azexo Marketing Automation de AZEXO permite la escalada de privilegios. Este problema afecta a Marketing Automation de AZEXO: desde n/a hasta la versión 1.27.80. The Marketing Automation by AZEXO plugin for WordPress is vulnerable to Privilege Escalation in all v... • https://patchstack.com/database/vulnerability/marketing-automation-by-azexo/wordpress-marketing-automation-by-azexo-plugin-1-27-80-privilege-escalation-vulnerability?_s_id=cve • CWE-266: Incorrect Privilege Assignment •
CVSS: 9.9EPSS: 0%CPEs: 1EXPL: 0CVE-2024-50480 – WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerability
https://notcve.org/view.php?id=CVE-2024-50480
25 Oct 2024 — Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through 1.27.80. La vulnerabilidad de carga sin restricciones de archivos con tipo peligroso azexo Marketing Automation by AZEXO permite cargar un shell web a un servidor web. Este problema afecta a Marketing Automation de AZEXO: desde n/a hasta la versión 1.27.80. The Marketing Automation by AZEXO plugin for... • https://patchstack.com/database/vulnerability/marketing-automation-by-azexo/wordpress-marketing-automation-by-azexo-plugin-1-27-80-arbitrary-file-upload-vulnerability?_s_id=cve • CWE-434: Unrestricted Upload of File with Dangerous Type •