GCVE - cpe:2.3:a:molongui:molongui:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:molongui:molongui:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Molongui (`c1c0f66b-f520-58f4-ae6f-973b83e94a39`)
Product	Molongui (`9129dae7-6859-5163-baeb-3497113a602a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wpplugins/molongui-authorship`	purl2cpe	2026-06-01 10:17:43.534612

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-30507`	vulnerable	2026-06-08 06:35:30.475768	WordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerability LOW (2.7) Authorization Bypass Through User-Controlled Key vulnerability in Molongui.This issue affects Molongui: from n/a through 4.7.7. Published: 2024-03-29T14:15:44.325Z Updated: 2026-04-28T16:09:25.674Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/molongui-authorship/wordpress-molongui-authorship-plugin-4-7-7-insecure-direct-object-references-idor-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29764`	vulnerable	2026-06-08 06:33:29.306533	WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Molongui allows Stored XSS.This issue affects Molongui: from n/a through 4.7.7. Published: 2024-03-27T13:09:57.181Z Updated: 2026-04-28T16:09:17.787Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/molongui-authorship/wordpress-molongui-plugin-4-7-7-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50876`	vulnerable	2026-06-08 06:16:16.918990	WordPress Molongui plugin <= 4.7.3 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Molongui: from n/a through 4.7.3. Published: 2024-12-09T11:29:57.285Z Updated: 2026-04-28T16:08:59.707Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/molongui-authorship/vulnerability/wordpress-molongui-plugin-4-7-3-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.