2145 matches found
CVE-2023-32117
CVE-2023-32117 affects the WordPress plugin Integrate Google Drive (versions n/a–1.1.99). The root cause is Missing Authorization due to missing capability checks on REST API endpoints, enabling unauthenticated attackers to perform operations (move files, create folders, copy details, etc.). The ...
CVE-2023-32299
CVE-2023-32299 affects the WordPress plugin Ni WooCommerce Sales Report (Ni WooCommerce Sales Report) up to version 3.7.3, due to Missing Authorization / Broken Access Control. Attackers with subscriber-level privileges could exploit an improperly enforced access control to view sales data. The v...
CVE-2023-47756
CVE-2023-47756 is a Missing Authorization (Broken Access Control) vulnerability in the Welcome Email Editor WordPress plugin. Affected versions are
CVE-2023-47760
CVE-2023-47760 affects WordPress WPDeveloper Essential Blocks for Gutenberg. The vulnerability is a Missing Authorization/Broken Access Control in Essential Blocks for Gutenberg versions
CVE-2023-47762
CVE-2023-47762 affects WordPress BetterDocs plugin up to version 2.5.2, due to Missing Authorization via AJAX actions. Impact: unauthorized modification of documents for authenticated users with subscriber+ privileges (per Patchstack). Mitigation: upgrade to version 2.5.3 or later where fix is ap...
CVE-2023-47764
CVE-2023-47764 is a Missing Authorization vulnerability in the WordPress Ditty Ditty-news-ticker plugin. Affected versions are
CVE-2023-47780
CVE-2023-47780 (EasyAzon WordPress plugin) is a Missing Authorization vulnerability in AJAX actions that affects EasyAzon versions
CVE-2023-47805
CVE-2023-47805: WordPress WPCafe plugin
CVE-2023-47820
CVE-2023-47820 affects WordPress WP Like Button
CVE-2023-47822
CVE-2023-47822 : WordPress plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar has a Missing/Broken Access Control vulnerability. Affected versions are
CVE-2023-47826
CVE-2023-47826 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the Restaurant & Cafe Addon for Elementor (WordPress) up to version 1.5.3. Unauthenticated attackers could modify data via multiple AJAX functions. Fixed in 1.5.4. Affected product/version: Restaurant &...
CVE-2023-47830
CVE-2023-47830 is a WordPress plugin vulnerability in Live Preview for Contact Form 7, affecting versions
CVE-2023-47832
CVE-2023-47832 affects the WordPress SearchIQ plugin (versions
CVE-2023-47836
CVE-2023-47836 affects the WP Meta and Date Remover plugin for WordPress, specifically versions
CVE-2023-47838
CVE-2023-47838 affects the WordPress plugin Conditional Fields for Contact Form 7 (cf7-conditional-fields). Root cause: Missing Authorization / Broken Access Control due to incorrectly configured access control levels, allowing exploitation by low-privilege users. Affected versions:
CVE-2023-48274
CVE-2023-48274 describes a Missing Authorization vulnerability in the WordPress plugin WCMultiShipping (Mondial Relay for WooCommerce). Affected versions are
CVE-2023-48287
CVE-2023-48287 relates to the WordPress TextMe SMS plugin, affected versions 1.9.0 and earlier, which exhibits a Broken Access Control/Missing Authorization vulnerability. The issue allows exploitation of improperly configured access controls (as described by PatchStack, with references to a brok...
CVE-2023-48324
CVE-2023-48324 relates to a Broken Access Control vulnerability in WordPress plugin Awesome Support up to version 6.1.4. The issue is described as missing authorization allowing exploitation of incorrectly configured access control security levels. Public sources in the connected data identify af...