CVE-2023-41649 WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in hoangkhanh92 Ovic Product Bundle ovic-product-bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovic Product Bundle: from n/a through = 1.1.2...

CVE-2023-41130 WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.12...

CVE-2023-40670 WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in ReviewX ReviewX reviewx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through = 1.6.17...

CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

CVE-2023-40670

CVE-2023-40670 affects the WordPress ReviewX plugin (

CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

CVE-2023-40678

CVE-2023-40678 affects the WordPress Simple URLs plugin (

CVE-2023-40331

CVE-2023-40331 describes a Missing Authorization vulnerability in WordPress plugin Accordion Slider (bqworks) affecting version 1.9.6 and earlier. The root cause is an incorrect/absent authorization check that permits improper access to sensitive functions (Broken Access Control). The CVSSv3.1 ba...

CVE-2023-40213

CVE-2023-40213: WordPress Justified Gallery plugin up to version 1.7.3 suffers Broken Access Control (Missing Authorization) allowing access control bypass for certain notices. Publicly reported details in Patchstack and multiple security trackers confirm affected plugin is Justified Gallery

CVE-2023-40011

CVE-2023-40011 affects WordPress Cost Calculator Builder plugin (

CVE-2023-40203

CVE-2023-40203: WordPress MailChimp Forms by MailMunch

CVE-2023-40005 WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control

Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through = 3.1.5...

CVE-2023-40003 WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Project Manager: from n/a through = 2.6.7...

CVE-2023-39996 WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion and Accordion Slider: from n/a through 1.2.4...

CVE-2023-39996

CVE-2023-39996 is a Missing/Broken Authorization vulnerability in the WordPress plugin Accordion and Accordion Slider (versions ≤ 1.2.4). The issue arises from missing authorization checks in functions such as wp_aas_get_attachment_edit_form and wp_aas_save_attachment_data , allowing unauthentica...

CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in dylanblokhuis Instant CSS instant-css allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through = 1.1.4...

CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through 1.1.4...

CVE-2023-38479

CVE-2023-38479 affects WordPress Simple Googlebot Visit plugin (

CVE-2023-38480

CVE-2023-38480 affects Booster Elementor Addons (WordPress plugin) up to version 1.4.9. The root cause is missing authorization / broken access control enabling unauthenticated access. Public references indicate the vulnerability exists in Booster Elementor Addons

CVE-2023-38475 WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in EDGARROJAS Donations Made Easy – Smart Donations smart-donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through = 4.0.12...