WordPress BuddyBoss Theme Theme <= 2.4.60 is vulnerable to Settings Change

Software BuddyBoss Theme Type Theme Vulnerable versions = 2.4.60 Fixed in 2.4.61 OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2023-51477 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 91b38329ee46 Credits Dave Jong Patchstack Required...

WordPress Product Table by WBW Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Product Table by WBW Type Plugin Vulnerable versions = 1.8.6 Fixed in 1.8.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51512 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d013df4bc22b Credits Skalucy Requir...

WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure

Software Database Cleaner Type Plugin Vulnerable versions = 0.9.8 Fixed in 0.9.9 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2023-51508 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c44776f4b131 Credits Joshua...

WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Privilege Escalation

Software Rencontre – Dating Site Type Plugin Vulnerable versions = 3.10.1 Fixed in 3.11 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51425 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 603c87225836 Credits...

WordPress Local Delivery Drivers for WooCommerce Plugin <= 1.9.0 is vulnerable to Privilege Escalation

Software Local Delivery Drivers for WooCommerce Type Plugin Vulnerable versions = 1.9.0 Fixed in 1.9.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51481 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID...

WordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin <= 3.0.11 is vulnerable to Cross Site Request Forgery (CSRF)

Software Crowdsignal Dashboard – Polls, Surveys & more Type Plugin Vulnerable versions = 3.0.11 Fixed in 3.1.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51489 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID...

WordPress Build App Online Plugin <= 1.0.21 is vulnerable to Privilege Escalation

Software Build App Online Type Plugin Vulnerable versions = 1.0.21 Fixed in 1.0.22 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51478 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 30eb1e208be5 Credits Rafi...

WordPress WP Optin Wheel Plugin <= 1.4.3 is vulnerable to Sensitive Data Exposure

Software WP Optin Wheel Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2023-51408 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b2bf994f5179 Credits Joshua Ch...

WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.9 is vulnerable to Broken Access Control

Software WooCommerce Ship to Multiple Addresses Type Plugin Vulnerable versions = 3.8.9 Fixed in 3.8.10 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51497 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 29dc0846876f Credits...

WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

Software Doofinder for WooCommerce Type Plugin Vulnerable versions = 2.0.33 Fixed in 2.1.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51678 Patch priority Low CVSS severity Low 4.3 Developer Doofinder PSID 9effdff53885 Credits Abdi Pranata Required...

WordPress Build App Online Plugin <= 1.0.20 is vulnerable to Privilege Escalation

Software Build App Online Type Plugin Vulnerable versions = 1.0.20 Fixed in 1.0.21 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51479 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 13bcbfacf92f Credits Rafi...

WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload

Software WP Mail Log Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-51410 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 12226d2698ab Credits Rafie Muhammad Patchstack Required...

WordPress FunnelKit Checkout Plugin <= 3.10.3 is vulnerable to Arbitrary Content Deletion

Software FunnelKit Checkout Type Plugin Vulnerable versions = 3.10.3 Fixed in 3.11.0 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2023-51672 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 02d122ae661d Credits Dave Jong...

WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin <= 4.2.1 is vulnerable to Privilege Escalation

Software WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.3.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51546 Patch priority Medium CVSS severity Medium...

WordPress Ultimate Addons for Beaver Builder Plugin <= 1.35.14 is vulnerable to Privilege Escalation

Software Ultimate Addons for Beaver Builder Type Plugin Vulnerable versions = 1.35.14 Fixed in 1.35.15 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51398 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID...

WordPress ZeroBounce Email Verification & Validation Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software ZeroBounce Email Verification & Validation Type Plugin Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51374 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID acd9ba4e664e Credits DoYeon Pa...

WordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS)

Software BuddyPress Type Plugin Vulnerable versions = 11.3.1 Fixed in 11.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50880 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c7a14505513a Credits Rafie Muhammad Patchstack Required...

WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50889 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c34e72dc456f Credits Rafie Muhammad Patchstack Required...

WordPress UpSolution Core Plugin <= 8.17.4 is vulnerable to Cross Site Scripting (XSS)

Software UpSolution Core Type Plugin Vulnerable versions = 8.17.4 Fixed in 8.18 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50893 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e07411cbeb3f Credits Rafie Muhammad Patchstack Requir...

WordPress Metform Elementor Contact Form Builder Plugin <= 3.4.0 is vulnerable to Broken Access Control

Software Metform Elementor Contact Form Builder Type Plugin Vulnerable versions = 3.4.0 Fixed in 3.4.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-50903 Patch priority Low CVSS severity Low 5.3 Developer Wpmet PSID a863ac993a04 Credits Revan Arifio...