Vulnerabilidades de Horea Radu
CVEs publicadas que afetam produtos de Horea Radu: 3 registro(s), com severidade, exploração e correções.
CVE-2025-12027
Média · 4.3
CWE-862 19/02/2026
Mesmerize Companion <= 1.6.158 - Missing Authorization Authenticated (Subscriber+) Settings Update
The Mesmerize Companion plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the "openPageInCustomizer" and "openPageInDefaultEditor" functions in all versions up to, and including, 1.6.158. This makes it possible for authenticated attackers - with subscriber level access and above, on websites with the Mesmerize theme activated - to mark arbitrary pages as maintainable, wrap their content in custom sections, change page template metadata, and toggle the default editor flag without proper authorization.
CVE-2026-24543
Média · 4.3
CWE-862 23/01/2026
WordPress Materialis Companion plugin <= 1.3.52 - Broken Access Control vulnerability
Missing Authorization vulnerability in Horea Radu Materialis Companion materialis-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Materialis Companion: from n/a through <= 1.3.52.
CVE-2025-62052
Média · 4.3
CWE-862 22/10/2025
WordPress One Page Express Companion plugin <= 1.6.43 - Broken Access Control vulnerability
Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affects One Page Express Companion: from n/a through <= 1.6.43.