WordPress MainWP Favorites Extension Plugin <= 4.0.10 is vulnerable to Broken Access Control

Software MainWP Favorites Extension Type Plugin Vulnerable versions = 4.0.10 Fixed in 4.0.11 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23739 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 74613185c5a7 Credits Dave Jong...

CVE-2015-9513

The Easy Digital Downloads EDD Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

Design/Logic Flaw

The Easy Digital Downloads EDD Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...