WordPress WooCommerce Product Carousel Slider Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Product Carousel Slider Type Plugin Vulnerable versions = 3.3.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47755 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ded670494bbe Credits Abdi...

WordPress ElementsKit Pro Plugin <= 3.3.0 is vulnerable to Broken Access Control

Software ElementsKit Pro Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.6.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-39993 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID b8963eeda442 Credits Rafie Muhammad Patchsta...

WordPress Ultimate Dashboard Plugin <= 3.7.7 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Dashboard Type Plugin Vulnerable versions = 3.7.7 Fixed in 3.7.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4726 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f3f77cbb9f76 Credits Marco Wotschka Requir...

WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Broken Access Control

Software Themify Ultra Type Theme Vulnerable versions = 7.3.5 Fixed in 7.3.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46146 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID dba7a9d87836 Credits Rafie Muhammad Patchstack...

CVE-2023-47238

A vulnerability in Ajay Top 10 top-10.This issue affects Top 10: from n/a through = 3.3.2...

CVE-2023-47238 WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin = 3.3.2 versions...

CVE-2023-47238 WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin = 3.3.2 versions...

WordPress Ecwid Shopping Cart Plugin <= 6.12.3 is vulnerable to Broken Access Control

Software Ecwid Shopping Cart Type Plugin Vulnerable versions = 6.12.3 Fixed in 6.12.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5cdd0a137b51 Credits Unknown Required privilege...

WordPress Mini Cart Drawer For WooCommerce Plugin <= 4.0.0 is vulnerable to Broken Access Control

Software Mini Cart Drawer For WooCommerce Type Plugin Vulnerable versions = 4.0.0 Fixed in 4.0.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47694 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d5e11a29b0ee Credits Abdi Pranata...

WordPress Job Manager & Career Plugin < 1.4.4 is vulnerable to Sensitive Data Exposure

Software Job Manager & Career Type Plugin Vulnerable versions 1.4.4 Fixed in 1.4.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-5906 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 4d36f550a2ca Credits Dmitrii Ignatyev Requir...

WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

Software MainWP Type Plugin Vulnerable versions = 4.4.3.3 Fixed in 4.4.3.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-38519 Patch priority Low CVSS severity Low 7.6 Developer MainWP PSID 2e730b92088b Credits YouGina Required privilege Administrator Published 9 November,...

WordPress WooCommerce Checkout Manager Plugin <= 7.3.0 is vulnerable to Broken Access Control

Software WooCommerce Checkout Manager Type Plugin Vulnerable versions = 7.3.0 Fixed in 7.3.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47681 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID b9559fa71258 Credits Rafie Muhammad...

WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Software Product Enquiry for WooCommerce Type Plugin Vulnerable versions = 3.0 Fixed in 3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47696 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9e512e1145bf Credits thien...

WordPress WP Featured Content and Slider Plugin <= 1.6 is vulnerable to Broken Access Control

Software WP Featured Content and Slider Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 1176a8e895c8 Credits Abdi Pranata...

WordPress Additional Order Filters for WooCommerce Plugin <= 1.11 is vulnerable to Cross Site Scripting (XSS)

Software Additional Order Filters for WooCommerce Type Plugin Vulnerable versions = 1.11 Fixed in 1.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47690 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b716b645579a...

WordPress Product Catalog Simple Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Product Catalog Simple Type Plugin Vulnerable versions = 1.7.5 Fixed in 1.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f2ff5330794a Credits Unknown Required...

CVE-2023-47238: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin = 3.3.2 versions...

WordPress WP Event Manager Plugin <= 3.1.42 is vulnerable to Cross Site Scripting (XSS)

Software WP Event Manager Type Plugin Vulnerable versions = 3.1.42 Fixed in 3.1.43 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47697 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 316eeef87a14 Credits LEE SE HYOUNG...

WordPress Japanized For WooCommerce Plugin <= 2.6.4 is vulnerable to Broken Access Control

Software Japanized For WooCommerce Type Plugin Vulnerable versions = 2.6.4 Fixed in 2.6.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47698 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID c4bc26dc8579 Credits Mika Required...

WordPress WP Responsive Recent Post Slider/Carousel Plugin <= 3.4 is vulnerable to Broken Access Control

Software WP Responsive Recent Post Slider/Carousel Type Plugin Vulnerable versions = 3.4 Fixed in 3.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 9480041e2654 Credits...