CVE-2023-0958

🗓️ 28 Jul 2023 04:37:03Reported by WordfenceType

Vulnerability in Inisev WordPress plugins allows unauthorized plugin installation. CVE-2023-0958

Reporter	Title	Published	Views	Family All 35
ATTACKERKB	CVE-2023-38514	13 Dec 202415:15	–	attackerkb
ATTACKERKB	CVE-2023-0958	28 Jul 202305:15	–	attackerkb
Circl	CVE-2023-0958	28 Jul 202312:29	–	circl
Circl	CVE-2023-38514	28 Jul 202312:29	–	circl
CNNVD	WordPress plugin Several 安全漏洞	7 Apr 202300:00	–	cnnvd
CNNVD	WordPress plugin Social Share Icons & Social Share Buttons 安全漏洞	13 Dec 202400:00	–	cnnvd
CVE	CVE-2023-38514	13 Dec 202414:23	–	cve
Cvelist	CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function	28 Jul 202304:37	–	cvelist
Cvelist	CVE-2023-38514 WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerability	13 Dec 202414:23	–	cvelist
EUVD	EUVD-2023-12943	3 Oct 202520:07	–	euvd

NVD

Vulners

Node

backupbliss backup_migrationRange<1.2.8wordpress

backupbliss cloneRange<2.3.8wordpress

copy-delete-posts duplicate_postRange<1.4.0wordpress

inisev enhanced_text_widgetRange<1.5.8wordpress

inisev redirectionRange<1.1.4wordpress

inisev rss_redirect_&_feedburner_alternativeRange<3.8wordpress

inisev ssl_mixed_content_fixRange<3.2.4wordpress

inisev ultimate_posts_widgetRange<2.2.5wordpress

mypopups pop-upRange<1.2.0wordpress

socialshare social_share_icons_&_social_share_buttonsRange<3.5.8wordpress

ultimatelysocial social_media_share_buttons_&_social_sharing_iconsRange<2.8.2wordpress

[
  {
    "vendor": "inisev",
    "product": "Redirection",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Pop-up",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "BackupBliss – Backup & Migration with Free Cloud Storage",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Duplicate Post",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "cl272",
    "product": "Enhanced Text Widget",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.5.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "cl272",
    "product": "Ultimate Posts Widget",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.2.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "migrate",
    "product": "Clone",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.3.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Social Media Share Buttons & Social Sharing Icons",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.8.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "steve85b",
    "product": "SSL Mixed Content Fix",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.2.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Social Share Icons & Social Share Buttons",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.5.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "s-feeds",
    "product": "RSS Redirect & Feedburner Alternative",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/ultimate-social-media-plus/tags/3.5.7/banner/misc.php
plugins	www.plugins.trac.wordpress.org/browser/backup-backup/tags/1.2.7/includes/banner/misc.php
plugins	www.plugins.trac.wordpress.org/browser/http-https-remover/tags/3.2.3/banner/misc.php
plugins	www.plugins.trac.wordpress.org/browser/copy-delete-posts/tags/1.4.0/banner/misc.php
plugins	www.plugins.trac.wordpress.org/browser/wp-clone-by-wp-academy/tags/2.3.7/modules/banner/misc.php
plugins	www.plugins.trac.wordpress.org/browser/enhanced-text-widget/tags/1.5.7/banner/misc.php
plugins	www.plugins.trac.wordpress.org/browser/enhanced-text-widget/tags/1.5.6/banner/misc.php
plugins	www.plugins.trac.wordpress.org/browser/ultimate-posts-widget/tags/2.2.5/banner/misc.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/cf7bdd0e-f3b3-4be5-8a30-2c6d9cb783a3
plugins	www.plugins.trac.wordpress.org/browser/wp-clone-by-wp-academy/tags/2.3.8/modules/banner/misc.php

17 Jun 2026 05:26Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.14.3 - 6.5

EPSS0.00691

SSVC

CWE-862