CVE-2023-47183

CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions

CVE-2023-47180

CVE-2023-47180 affects the WordPress plugin Finale Lite (XLPlugins Finale Lite) with Missing Authorization, allowing unauthenticated users to delete content due to incorrectly configured access control. Public sources in the Connected Documents confirm the vulnerable range as Finale Lite versions...

CVE-2023-47179

CVE-2023-47179 concerns the WordPress plugin WooODT Lite (ByConsole) with versions

CVE-2023-46635

CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...

CVE-2023-46633

CVE-2023-46633: WordPress WP Glossary plugin

CVE-2023-46631

CVE-2023-46631 affects the WordPress plugin Product Recommendation Quiz for eCommerce (versions

CVE-2023-46628

CVE-2023-46628 affects WP Word Count

CVE-2023-46616

CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)

CVE-2023-46611

CVE-2023-46611 concerns the WordPress YOP Poll plugin (

CVE-2023-46612

CVE-2023-46612 describes a Missing Authorization vulnerability in the Mediabay Mediabay-lite WordPress plugin. The issue is a broken/insufficient access control that could allow unauthorized actions within Mediabay’s file management/features. Technical details in connected sources confirm affecte...

CVE-2023-46610

CVE-2023-46610 relates to WordPress plugin Quill Forms (

CVE-2023-46609

CVE-2023-46609 concerns the WordPress FeedFocal plugin (<= 1.2.2), where Missing Authorization/Broken Access Control allows unauthenticated attackers to exploit access-control misconfigurations. Public records indicate affected versions are

CVE-2023-46607

CVE-2023-46607 affects the WP iCal Availability WordPress plugin. Affected versions are

CVE-2023-46606

CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions

CVE-2023-46605

CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions

CVE-2023-46309

CVE-2023-46309 affects WordPress plugin wpDiscuz prior to version 7.6.11, where a Missing Authorization flaw in access control allows unauthenticated users to perform restricted actions due to broken access control. Publicly known details indicate the affected range is wpDiscuz

CVE-2023-46206

CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...

CVE-2023-46196

CVE-2023-46196 affects the WordPress plugin Social proof testimonials and reviews by Repuso (plugin slug: social-testimonials-and-reviews-widget), vulnerable in versions up to and including 4.97 due to missing authorization (Broken Access Control). The issue allows interaction with data or featur...

CVE-2023-46195

CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)

CVE-2023-46082

CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...