2208 matches found
CVE-2020-35158
Rejected reason: CVE ID was once reserved, but never used...
CVE-2019-15798
Rejected reason: CVE ID was once reserved, but never used...
CVE-2020-35161
Rejected reason: CVE ID was once reserved, but never used...
CVE-2020-35157
Rejected reason: CVE ID was once reserved, but never used...
CVE-2023-39312
CVE-2023-39312 reports a Missing Authorization vulnerability in ThemeFusion Avada affecting versions up to 7.11.1. The issue arises from an authenticated (Author+) Arbitrary File Upload via zip extraction vulnerability in Avada, enabling a user with author-level privileges to upload files through...
CVE-2023-35049
CVE-2023-35049 affects the WordPress WooCommerce Stripe Payment Gateway plugin
CVE-2023-40004
CVE-2023-40004 is a Missing Authorization vulnerability affecting multiple ServMask WordPress extensions (Box, OneDrive, Dropbox, Google Drive) for All-in-One WP Migration. Connected sources (Patchstack) confirm unauthenticated access token manipulation due to insufficient authorization in the pl...
CVE-2023-44148
CVE-2023-44148 affects the WordPress Astra Bulk Edit plugin (
CVE-2023-44151
The CVE-2023-44151 entry corresponds to a Broken Access Control vulnerability in the WordPress Pre-Publish Checklist plugin (versions ≤ 1.1.1). The root cause is missing authorization/authentication validation, enabling access control bypass related to the Pre-Publish Checklist feature. Affected ...
CVE-2023-46146
CVE-2023-46146 relates to Themify Themify Ultra (Theme) with versions up to 7.3.5, where a Missing Authorization/Broken Access Control vulnerability could allow unauthorized access. Public sources indicate the issue affects Themify Ultra through 7.3.5 and that Patchstack lists the fixed version a...
CVE-2023-46148
CVE-2023-46148 – Themify Ultra (WordPress Theme) \n\nTechnical details from the provided sources indicate a Missing Authorization vulnerability in Themify Ultra (affecting versions up to 7.3.5). The root cause is insufficient access control that allows an authenticated user with subscriber-level ...
CVE-2023-47681
CVE-2023-47681 is a Missing/Broken Access Control vulnerability in QuadLayers WooCommerce Checkout Manager (WordPress plugin). It affects plugins up to version 7.3.0, allowing unauthenticated actors to exploit due to insufficient authorization checks. Patch details: fixed in version 7.3.1. Public...
CVE-2023-47771
CVE-2023-47771 affects WordPress plugin Essential Grid (ThemePunch OHG). It is a Missing Authorization vulnerability (Broken Access Control) enabling authenticated users with subscriber+ privileges to access functions intended for higher-privilege users. Affected versions: up to 3.0.18; CVSS v3.1...
CVE-2023-47783
CVE-2023-47783 is a Missing Authorization (Broken Access Control) vulnerability in Thrive Theme Builder up to version 3.23.x (before 3.24.0). The issue affects Thrive Theme Builder and is caused by a missing capability check in a function, enabling authenticated users with subscriber-level access...
CVE-2023-51376
Technical details (affected components, root cause, exact impact, and remediation) are not publicly available in the provided documents. Please monitor for updates from official advisories and CVE databases for CVE-2023-51376.
CVE-2023-51495
CVE-2023-51495 relates to the WooCommerce Warranty Requests WordPress plugin. Affected product: WooCommerce Warranty Requests (plugin slug woocommerce-warranty) up to version 2.2.7. Description in sources: a Missing Authorization vulnerability (Broken Access Control) that could allow unauthentica...
CVE-2023-51497
CVE-2023-51497 corresponds to a Missing Authorization (Broken Access Control) vulnerability affecting the WordPress WooCommerce Ship to Multiple Addresses plugin up to version 3.8.9. Public sources (NVD, Red Hat, and PTSecurity enrichment) indicate an authorization flaw that could allow bypass of...
CVE-2023-51507
Technical details about CVE-2023-51507 are not provided in the supplied documents. No explicit affected versions beyond 8.1.16 or remediation steps are listed; monitor for updates.
CVE-2023-51516
CVE-2023-51516 is a Missing Authorization vulnerability (Broken Access Control) affecting the WordPress plugin “Business Directory Plugin – Easy Listing Directories for WordPress” up to version 6.3.9. The root cause, per provided documents, is a dispatch-related authorization issue. Connected sou...