CVE-2023-46635

CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...

CVE-2023-46633

CVE-2023-46633: WordPress WP Glossary plugin

CVE-2023-46632

CVE-2023-46632 : WordPress plugin My Shortcodes

CVE-2023-46616

CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)

CVE-2023-46611

CVE-2023-46611 concerns the WordPress YOP Poll plugin (

CVE-2023-46610

CVE-2023-46610 relates to WordPress plugin Quill Forms (

CVE-2023-46609

CVE-2023-46609 concerns the WordPress FeedFocal plugin (<= 1.2.2), where Missing Authorization/Broken Access Control allows unauthenticated attackers to exploit access-control misconfigurations. Public records indicate affected versions are

CVE-2023-46605

CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions

CVE-2023-46606

CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions

CVE-2023-46206

CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...

CVE-2023-46195

CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)

CVE-2023-46082

CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...

CVE-2023-46080

CVE-2023-46080 : WordPress plugin ApplyOnline – Application Form Builder and Manager

CVE-2023-46079

CVE-2023-46079 affects the WordPress Ashe Extra plugin (

CVE-2023-45828

CVE-2023-45828 affects the WordPress RumbleTalk Live Group Chat plugin (versions up to and including 6.2.5). The issue is a Missing/Incorrectly Configured Authorization vulnerability (Broken Access Control) in the plugin’s handling of AJAX/authorization checks (handleRequest and related flows), a...

CVE-2023-45765

CVE-2023-45765 concerns weDevs WP ERP plugin versions

CVE-2023-45275

The CVE-2023-45275 entry refers to a Missing Authorization / Broken Access Control issue in the WordPress Kali Forms plugin (Contact Form builder with drag & drop). Affected versions are Kali Forms through 2.3.28; the vulnerability stems from an access-control weakness that could be exploited by ...

CVE-2023-45110

CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version

CVE-2023-45271

The CVE-2023-45271 entry concerns the WordPress plugin ProductX – Gutenberg WooCommerce Blocks (

CVE-2023-45045

CVE-2023-45045 concerns the WP Custom Widget area plugin for WordPress (versions up to and including 1.2.5). The issue is a Missing Authorization (Broken Access Control) vulnerability that arises from incorrectly configured access control security levels, enabling improper access by users with su...