WordPress Slider Pro Plugin <= 4.8.6 is vulnerable to Broken Access Control

Software Slider Pro Type Plugin Vulnerable versions = 4.8.6 Fixed in 4.8.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41865 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7155f5ea390e Credits Abdi Pranata Required privilege...

WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

Software Restrict Type Plugin Vulnerable versions = 2.2.4 Fixed in 2.2.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41861 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c9e5571465c1 Credits thiennv Required privile...

WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Pipes Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.4.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40009 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID a9072585c12c Credits Nguyen Xuan Chien Required...

WordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Leadster Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41668 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 0d88c4fa1d16 Credits LEE SE HYOUNG...

WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)

Software MyCryptoCheckout Type Plugin Vulnerable versions = 2.125 Fixed in 2.126 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41693 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ad222fa8439e Credits qilin99 Required...

WordPress Stock Quotes List Plugin <= 2.9.11 is vulnerable to Cross Site Scripting (XSS)

Software Stock Quotes List Type Plugin Vulnerable versions = 2.9.11 Fixed in 2.9.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41666 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8915def85604 Credits deokhunKim Required...

WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

Software WP Project Manager Type Plugin Vulnerable versions = 2.6.0 Fixed in 2.6.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-34383 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 02d3661940eb Credits Theodoros Malachias Required privilege...

WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Broken Access Control

Software WRC Pricing Tables Type Plugin Vulnerable versions = 2.3.7 Fixed in 2.3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32293 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID eca354e9c6c2 Credits Abdi Pranata Required...

The vulnerability of the RDP client FreeRDP, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to trigger a service failure.

The vulnerability of the RDP client FreeRDP relates to the escape of operations beyond the buffer in memory when processing values of the rect-left and rect-top parameters. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

WordPress TelSender Plugin <= 1.14.11 is vulnerable to Broken Access Control

Software TelSender Type Plugin Vulnerable versions = 1.14.11 Fixed in 1.14.12 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41683 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 00112e7933e5 Credits Abdi Pranata Required privilege...

WordPress WooCommerce Conversion Tracking Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Conversion Tracking Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ebb849878be Credits...

WordPress Directorist Plugin <= 7.7.1 is vulnerable to Broken Access Control

Software Directorist Type Plugin Vulnerable versions = 7.7.1 Fixed in 7.7.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c511217f52dd Credits István Márton Required privilege...

WordPress Product Category Showcase for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Product Category Showcase for WooCommerce Type Plugin Vulnerable versions = 1.1.9 Fixed in 2.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e261a353a568...

WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Goods Catalog Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41687 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f4c4ed84d022 Credits Abdi Pranata Required...

WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload

Software Export Import Menus Type Plugin Vulnerable versions = 1.8.0 Fixed in 1.9.0 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Upload CVE CVE-2023-34385 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 784df5b05bad Credits Emili Castells...

WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software User Feedback Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-39308 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4cad82df326d Credits Revan Arifio Required privilege...

WordPress Attorney Theme <= 3 is vulnerable to Cross Site Scripting (XSS)

Software Attorney Type Theme Vulnerable versions = 3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41692 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 18e026d95aab Credits Mika Required privilege...

WordPress Woocommerce Support System Plugin <= 1.2.2 is vulnerable to Broken Access Control

Software Woocommerce Support System Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41686 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID e64e405c119f Credits Mika Require...

WordPress Surfer Plugin <= 1.3.2.357 is vulnerable to Broken Access Control

Software Surfer Type Plugin Vulnerable versions = 1.3.2.357 Fixed in 1.3.3.379 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-35037 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID fee59b89530e Credits Jonas Höbenreich Required...

WordPress Ovic Product Bundle Plugin <= 1.1.2 is vulnerable to Broken Access Control

Software Ovic Product Bundle Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41649 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 75cf7d8a70bd Credits thiennv Required...