2139 matches found
CVE-2023-46633
CVE-2023-46633: WordPress WP Glossary plugin
CVE-2023-46616
CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)
CVE-2023-46611
CVE-2023-46611 concerns the WordPress YOP Poll plugin (
CVE-2023-46610
CVE-2023-46610 relates to WordPress plugin Quill Forms (
CVE-2023-46609
CVE-2023-46609 concerns the WordPress FeedFocal plugin (<= 1.2.2), where Missing Authorization/Broken Access Control allows unauthenticated attackers to exploit access-control misconfigurations. Public records indicate affected versions are
CVE-2023-46605
CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions
CVE-2023-46606
CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions
CVE-2023-46206
CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...
CVE-2023-46195
CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)
CVE-2023-46082
CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...
CVE-2023-46080
CVE-2023-46080 : WordPress plugin ApplyOnline – Application Form Builder and Manager
CVE-2023-46079
CVE-2023-46079 affects the WordPress Ashe Extra plugin (
CVE-2023-45828
CVE-2023-45828 affects the WordPress RumbleTalk Live Group Chat plugin (versions up to and including 6.2.5). The issue is a Missing/Incorrectly Configured Authorization vulnerability (Broken Access Control) in the plugin’s handling of AJAX/authorization checks (handleRequest and related flows), a...
CVE-2023-45765
CVE-2023-45765 concerns weDevs WP ERP plugin versions
CVE-2023-45275
The CVE-2023-45275 entry refers to a Missing Authorization / Broken Access Control issue in the WordPress Kali Forms plugin (Contact Form builder with drag & drop). Affected versions are Kali Forms through 2.3.28; the vulnerability stems from an access-control weakness that could be exploited by ...
CVE-2023-45271
The CVE-2023-45271 entry concerns the WordPress plugin ProductX – Gutenberg WooCommerce Blocks (
CVE-2023-45110
CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version
CVE-2023-45045
CVE-2023-45045 concerns the WP Custom Widget area plugin for WordPress (versions up to and including 1.2.5). The issue is a Missing Authorization (Broken Access Control) vulnerability that arises from incorrectly configured access control security levels, enabling improper access by users with su...
CVE-2023-45002
CVE-2023-45002 concerns the WordPress plugin WP User Frontend (weDevs) with Missing Authorization via AJAX actions up to version 3.6.8. The issue originates from Inadequate access control (Broken Access Control) that can be exploited by users with low privileges to bypass configured security leve...