6583 matches found
CVE-2023-47238 WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin = 3.3.2 versions...
CVE-2023-47238 WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin = 3.3.2 versions...
WordPress WP Featured Content and Slider Plugin <= 1.6 is vulnerable to Broken Access Control
Software WP Featured Content and Slider Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 1176a8e895c8 Credits Abdi Pranata...
WordPress Additional Order Filters for WooCommerce Plugin <= 1.11 is vulnerable to Cross Site Scripting (XSS)
Software Additional Order Filters for WooCommerce Type Plugin Vulnerable versions = 1.11 Fixed in 1.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47690 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b716b645579a...
WordPress Job Manager & Career Plugin < 1.4.4 is vulnerable to Sensitive Data Exposure
Software Job Manager & Career Type Plugin Vulnerable versions 1.4.4 Fixed in 1.4.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-5906 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 4d36f550a2ca Credits Dmitrii Ignatyev Requir...
WordPress WP responsive FAQ with category Plugin <= 3.8 is vulnerable to Broken Access Control
Software WP responsive FAQ with category Type Plugin Vulnerable versions = 3.8 Fixed in 3.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 32b8b1fbabbe Credits Abdi Pranat...
WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection
Software MainWP Type Plugin Vulnerable versions = 4.4.3.3 Fixed in 4.4.3.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-38519 Patch priority Low CVSS severity Low 7.6 Developer MainWP PSID 2e730b92088b Credits YouGina Required privilege Administrator Published 9 November,...
WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)
Software Product Enquiry for WooCommerce Type Plugin Vulnerable versions = 3.0 Fixed in 3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47696 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9e512e1145bf Credits thien...
WordPress Mini Cart Drawer For WooCommerce Plugin <= 4.0.0 is vulnerable to Broken Access Control
Software Mini Cart Drawer For WooCommerce Type Plugin Vulnerable versions = 4.0.0 Fixed in 4.0.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47694 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d5e11a29b0ee Credits Abdi Pranata...
WordPress WP Responsive Recent Post Slider/Carousel Plugin <= 3.4 is vulnerable to Broken Access Control
Software WP Responsive Recent Post Slider/Carousel Type Plugin Vulnerable versions = 3.4 Fixed in 3.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 9480041e2654 Credits...
WordPress Shortcodes Finder Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)
Software Shortcodes Finder Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47695 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cce9a201a0da Credits thiennv Require...
WordPress WP Event Manager Plugin <= 3.1.42 is vulnerable to Cross Site Scripting (XSS)
Software WP Event Manager Type Plugin Vulnerable versions = 3.1.42 Fixed in 3.1.43 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47697 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 316eeef87a14 Credits LEE SE HYOUNG...
WordPress Ecwid Shopping Cart Plugin <= 6.12.3 is vulnerable to Broken Access Control
Software Ecwid Shopping Cart Type Plugin Vulnerable versions = 6.12.3 Fixed in 6.12.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5cdd0a137b51 Credits Unknown Required privilege...
WordPress Plugin Top 10 - WordPress Popular posts by WebberZone Security Breach
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress WooCommerce Checkout Manager Plugin <= 7.3.0 is vulnerable to Broken Access Control
Software WooCommerce Checkout Manager Type Plugin Vulnerable versions = 7.3.0 Fixed in 7.3.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47681 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID b9559fa71258 Credits Rafie Muhammad...
WordPress Japanized For WooCommerce Plugin <= 2.6.4 is vulnerable to Broken Access Control
Software Japanized For WooCommerce Type Plugin Vulnerable versions = 2.6.4 Fixed in 2.6.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47698 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID c4bc26dc8579 Credits Mika Required...
WordPress Product Catalog Simple Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
Software Product Catalog Simple Type Plugin Vulnerable versions = 1.7.5 Fixed in 1.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f2ff5330794a Credits Unknown Required...
CVE-2023-47229
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Vyas Dipen Top 25 Social Icons plugin = 3.1 versions...
