Lucene search
K

CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

🗓️ 28 Jul 2023 04:37:03Reported by WordfenceType 
cvelist
 cvelist
🔗 www.cve.org👁 24 Views

Several WordPress plugins by Inisev allow unauthorized installation of plugins, enabling authenticated attackers with minimal permissions to install select plugins from Inisev on vulnerable sites

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2023-38514
13 Dec 202415:15
attackerkb
ATTACKERKB
CVE-2023-0958
28 Jul 202305:15
attackerkb
Circl
CVE-2023-0958
28 Jul 202312:29
circl
Circl
CVE-2023-38514
28 Jul 202312:29
circl
CNNVD
WordPress plugin Several 安全漏洞
7 Apr 202300:00
cnnvd
CNNVD
WordPress plugin Social Share Icons & Social Share Buttons 安全漏洞
13 Dec 202400:00
cnnvd
CVE
CVE-2023-0958
28 Jul 202304:37
cve
CVE
CVE-2023-38514
13 Dec 202414:23
cve
Cvelist
CVE-2023-38514 WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerability
13 Dec 202414:23
cvelist
EUVD
EUVD-2023-12943
3 Oct 202520:07
euvd
Rows per page
[
  {
    "vendor": "inisev",
    "product": "Redirection",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Pop-up",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "BackupBliss – Backup & Migration with Free Cloud Storage",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Duplicate Post",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "cl272",
    "product": "Enhanced Text Widget",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.5.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "cl272",
    "product": "Ultimate Posts Widget",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.2.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "migrate",
    "product": "Clone",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.3.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Social Media Share Buttons & Social Sharing Icons",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.8.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "steve85b",
    "product": "SSL Mixed Content Fix",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.2.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "inisev",
    "product": "Social Share Icons & Social Share Buttons",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.5.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "s-feeds",
    "product": "RSS Redirect & Feedburner Alternative",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation