CVE-2023-36506 WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Waiting List: from n/a through 2.13.0...

CVE-2023-35777 WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.1.2.2...

CVE-2023-35875

CVE-2023-35875 affects the Gutenverse (Gutenberg Blocks – Page Builder for Site Editor) WordPress plugin. According to Patchstack, versions

CVE-2023-35052

The CVE-2023-35052 entry concerns the WordPress Directorist plugin (Directorist) ≤ 7.5.4, with a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue is described across multiple sources as enabling Arbitrary Content Dele...

CVE-2023-35046

CVE-2023-35046 concerns the WordPress plugin Dynamic Visibility for Elementor . Affected: Dynamic Visibility for Elementor versions up to 5.0.5. Issue: Missing Authorization / broken access control due to incorrectly configured access control security levels. Impact: per sources, this results in ...

CVE-2023-34387 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Constant Contact Constant Contact Forms constant-contact-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through = 2.0.3...

CVE-2023-34381

CVE-2023-34381 refers to a WordPress Zippy plugin vulnerability (Zippy

CVE-2023-33998 WordPress Easy Social Icons plugin <= 3.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in cybernetikz Easy Social Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Icons: from n/a through 3.2.5...

CVE-2023-33996 WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in СleanTalk - Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spam protection, AntiSpam, FireWall by CleanTalk: from n/a through 6.10...

CVE-2023-33994

CVE-2023-33994 affects the WordPress Slimstat Analytics plugin, specifically versions up to and including 5.0.5.1. The root cause is a missing authorization check leading to Broken Access Control. The Patchstack entry confirms the vulnerability, with exposure under the plugin’s access control, an...

CVE-2023-33928 WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through 1.4.0...

CVE-2023-33928 WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through = 1.4.0...

CVE-2023-33324 WordPress Easy Captcha plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in wppal Easy Captcha easy-captcha allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Captcha: from n/a through = 1.0...

CVE-2023-32963

CVE-2023-32963 affects the WordPress plugin “WooCommerce Predictive Search” (WooCommerce Predictive Search) at versions up to 5.8.0. The root cause is Missing Authorization/OAuth-like access control, enabling unauthenticated users to exploit multiple AJAX actions due to broken access checks. The ...

CVE-2023-33215 WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Taggbox Taggbox taggbox-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taggbox: from n/a through = 3.3...

CVE-2023-32599

CVE-2023-32599 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin WordPress reCAPTCHA for all (recaptcha-for-all) ≤ 1.22, with a fix available in 1.23. The vulnerability allows exploitation of incorrectly configured access control security levels ...

CVE-2023-32593

The CVE-2023-32593 entry affects the WordPress GS Pins for Pinterest plugin up to version 1.6.7, where a Missing Authorization / Broken Access Control vulnerability exists due to incorrectly configured access control. Patchstack confirms that versions

CVE-2023-32593 WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through = 1.6.7...

CVE-2023-32586

CVE-2023-32586 concerns the WordPress SoundCloud Is Gold plugin (versions

CVE-2023-32581

CVE-2023-32581 affects WP-Chatbot for Messenger (WordPress plugin) up to version 4.7, with a Missing Authorization / Broken Access Control vulnerability. Root cause: insufficient access control checks enabling unauthorized actions via the plugin. CVSS v3.1 base score is 5.4 (Medium). Patch: fixed...