1820 matches found
CVE-2023-47225
CVE-2023-47225 affects the WordPress Short URL plugin (shorten-url) version 1.6.8 and earlier. The issue is a Missing Authorization/broken access control allowing exploitation via multiple AJAX functions, as documented in Patchstack and CVE records. Public details consistently state affected vers...
CVE-2023-47187
CVE-2023-47187 affects the WordPress plugin Animated Rotating Words (css3-rotating-words). Root cause: Missing authorization/broken access control allowing exploitation under the plugin’s access levels. Affected versions:
CVE-2023-47183
CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions
CVE-2023-47180
CVE-2023-47180 affects the WordPress plugin Finale Lite (XLPlugins Finale Lite) with Missing Authorization, allowing unauthenticated users to delete content due to incorrectly configured access control. Public sources in the Connected Documents confirm the vulnerable range as Finale Lite versions...
CVE-2023-47179
CVE-2023-47179 concerns the WordPress plugin WooODT Lite (ByConsole) with versions
CVE-2023-46635
CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...
CVE-2023-46631
CVE-2023-46631 affects the WordPress plugin Product Recommendation Quiz for eCommerce (versions
CVE-2023-46611
CVE-2023-46611 concerns the WordPress YOP Poll plugin (
CVE-2023-46612
CVE-2023-46612 describes a Missing Authorization vulnerability in the Mediabay Mediabay-lite WordPress plugin. The issue is a broken/insufficient access control that could allow unauthorized actions within Mediabay’s file management/features. Technical details in connected sources confirm affecte...
CVE-2023-46608
CVE-2023-46608 affects the DoLogin Security WordPress plugin ( 3.7.1 (fixed in 3.8). The available connected sources corroborate the nature (Missing Authorization) and the affected versions, and indicate patch availability in 3.8. No exploitation details are provided in the supplied documents bey...
CVE-2023-46609
CVE-2023-46609 concerns the WordPress FeedFocal plugin (<= 1.2.2), where Missing Authorization/Broken Access Control allows unauthenticated attackers to exploit access-control misconfigurations. Public records indicate affected versions are
CVE-2023-46607
CVE-2023-46607 affects the WP iCal Availability WordPress plugin. Affected versions are
CVE-2023-46606
CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions
CVE-2023-46605
CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions
CVE-2023-46309
CVE-2023-46309 affects WordPress plugin wpDiscuz prior to version 7.6.11, where a Missing Authorization flaw in access control allows unauthenticated users to perform restricted actions due to broken access control. Publicly known details indicate the affected range is wpDiscuz
CVE-2023-46206
CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...
CVE-2023-46203
CVE-2023-46203 concerns WordPress plugin Just Custom Fields (v
CVE-2023-46195
CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)
CVE-2023-46082
CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...