765 matches found
CVE-2024-43973 WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability
Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through = 2.8.11...
CVE-2024-43980 WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: from n/a through 1.4.1...
CVE-2024-43980
CVE-2024-43980 concerns CozyThemes Fota WP (FotaWP) with a Missing Authorization vulnerability due to incorrectly configured access control. Public sources indicate affecting Fota WP versions from n/a through 1.4.1. Multiple connected documents reference the patch status and fix guidance, noting ...
CVE-2024-43981
CVE-2024-43981 is a Missing Authorization vulnerability in the GeoDirectory WordPress plugin (GeoDirectory – WP Business Directory Plugin and Classified Listings Directory). Affected range: GeoDirectory versions up to 2.3.70. The Red Hat and ENISA entries similarly describe the issue. The known r...
CVE-2024-44006
CVE-2024-44006 affects WordPress WooCommerce Multilingual & Multicurrency (OnTheGoSystems) plugin
CVE-2024-44031
CVE-2024-44031 corresponds to a WordPress JoomSport plugin vulnerability (versions
CVE-2024-44031 WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through = 5.6.3...
CVE-2024-44052 WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in HelloAsso HelloAsso helloasso.This issue affects HelloAsso: from n/a through = 1.1.10...
CVE-2024-47361
CVE-2024-47361 – Elementor Addon Elements (WPVibes)
CVE-2024-47362 WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1.16...
CVE-2024-47362
CVE-2024-47362 is a Broken Access Control vulnerability in WordPress plugin Strong Testimonials (versions
CVE-2024-50419
CVE-2024-50419 affects Greenshift – animation and page builder blocks (WordPress plugin) up to version 9.7. Root cause: Incorrect Authorization / Broken access control due to misconfigured access security levels. Public CVSS data from NVD cites a 3.1 base score of 9.8 (C/H/I/A). Patch available i...
CVE-2024-50428
Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multi Step Form: from n/a through = 1.7.21...
CVE-2024-50422
Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...
CVE-2024-50421
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 3.8.6...
CVE-2024-50423
Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through = 3.1.5...
CVE-2024-50421
CVE-2024-50421 concerns the WordPress plugin WooCommerce PDF Invoices & Packing Slips (versions
CVE-2024-50423 WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through = 3.1.5...
CVE-2024-50423
Templately WordPress plugin
CVE-2024-50424 WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through = 3.1.5...