WordPress User Feedback Plugin <= 1.0.10 is vulnerable to Broken Access Control

Software User Feedback Type Plugin Vulnerable versions = 1.0.10 Fixed in 1.0.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-50887 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 72613a1d0e22 Credits Revan Arifio Required privile...

WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Beaver Builder Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50889 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c34e72dc456f Credits Rafie Muhammad Patchstack Required...

WordPress Google Photos Gallery with Shortcodes Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Google Photos Gallery with Shortcodes Type Plugin Vulnerable versions = 4.0.2 Fixed in 4.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51373 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 67df1357fab0 Credits Le Ngoc An...

CVE-2022-41762

An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the bench or pid parameter to top.pl, or the id parameter to easy1350.pl...

WordPress Sensei LMS Plugin <= 4.17.0 is vulnerable to Cross Site Scripting (XSS)

Software Sensei LMS Type Plugin Vulnerable versions = 4.17.0 Fixed in 4.18.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50875 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 28be70e5b8cd Credits Rafie Muhammad Patchstack Required...

WordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)

Software Anti Hacker Type Plugin Vulnerable versions = 4.34 Fixed in 4.35 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-50858 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 454a70c9f44f Credits Mika Required privilege...

WordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injection

Software Booking Manager Type Plugin Vulnerable versions = 2.1.5 Fixed in 2.1.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50840 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID 1f8bbef81167 Credits Ngô Thiên An ancorn from VNPT-VCI Required...

WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection

Software Welcart e-Commerce Type Plugin Vulnerable versions = 2.9.3 Fixed in 2.9.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50847 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 04a7c6fd4f27 Credits Muhammad Daffa Required privilege Editor...

WordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection

Software RegistrationMagic Type Plugin Vulnerable versions = 5.2.4.5 Fixed in 5.2.4.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50846 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 9ebe43b2d455 Credits Muhammad Daffa Required privilege...

WordPress Advanced Form Integration Plugin <= 1.75.0 is vulnerable to SQL Injection

Software Advanced Form Integration Type Plugin Vulnerable versions = 1.75.0 Fixed in 1.76.0 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50853 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID b0d2ea2b120c Credits Muhammad Daffa Required privilege...

WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection

Software NEX-Forms – Ultimate Form Builder Type Plugin Vulnerable versions = 8.5.5 Fixed in 8.5.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50838 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 3121cd44ed44 Credits Khalid Yusuf Required privilege...

WordPress Photo Gallery by 10Web Plugin <= 1.8.18 is vulnerable to Cross Site Scripting (XSS)

Software Photo Gallery by 10Web Type Plugin Vulnerable versions = 1.8.18 Fixed in 1.8.19 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6924 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0bcf8b758508 Credits István Márton...

WordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection

Software Simply Schedule Appointments Type Plugin Vulnerable versions 1.6.6.1 Fixed in 1.6.6.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50851 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID a0f5e904e5c2 Credits Muhammad Daffa Required privilege...

WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection

Software Squirrly SEO - Advanced Pack Type Plugin Vulnerable versions = 2.3.8 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50854 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d251faf0f6ee Credits Muhammad Daffa Required privilege...

WordPress MF Gig Calendar Plugin <= 1.2.1 is vulnerable to SQL Injection

Software MF Gig Calendar Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50842 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID 54f1b98a01c0 Credits Khalid Yusuf Required privilege Contributor...

WordPress Pre* Party Resource Hints Plugin <= 1.8.19 is vulnerable to SQL Injection

Software Pre Party Resource Hints Type Plugin Vulnerable versions = 1.8.19 Fixed in 1.8.20 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50855 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 098859db7935 Credits Muhammad Daffa Required privilege...

WordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL Injection

Software BookIt Type Plugin Vulnerable versions = 2.4.3 Fixed in 2.4.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50852 Patch priority Low CVSS severity Low 7.6 Developer Liquid Web / StellarWP PSID 93198e5bb403 Credits Muhammad Daffa Required privilege Administrator...

WordPress 404 Solution Plugin <= 2.34.0 is vulnerable to SQL Injection

Software 404 Solution Type Plugin Vulnerable versions = 2.34.0 Fixed in 2.35.0 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50848 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 295d8959acb7 Credits Muhammad Daffa Required privilege Administrator...

WordPress Jquery news ticker Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Jquery news ticker Type Plugin Vulnerable versions = 3.1 Fixed in 3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5432 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4f07a499a4a8 Credits István Márton Required...

WordPress CSS & JavaScript Toolbox Plugin <= 11.8 is vulnerable to Cross Site Scripting (XSS)

Software CSS & JavaScript Toolbox Type Plugin Vulnerable versions = 11.8 Fixed in 11.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50823 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 61031c39a340 Credits Ngô Thiên An ancorn from VNPT-V...