1820 matches found
CVE-2023-48776
CVE-2023-48776 affects the WordPress canvasio3D Light plugin (
CVE-2023-48779
CVE-2023-48779 pertains to WordPress 360 Javascript Viewer (plugin) with Broken Access Control via Missing Authorization. Affected versions are
CVE-2023-49158
CVE-2023-49158 affects the WordPress plugin LadiApp (LadiPage) and permits Stored XSS due to improper input neutralization during web page generation. Affected: LadiApp versions up to 4.4. Root cause: inadequate sanitization of input when generating pages. Impact: stored cross-site scripting coul...
CVE-2023-49167
CVE-2023-49167 affects the WordPress Database for CF7 plugin (
CVE-2023-49193
CVE-2023-49193 is a verifiable vulnerability in the WordPress plugin Social Pug (Hubbub Lite) : versions up to and including 1.30.0 allow a Missing Authorization / Broken Access Control condition. Unauthenticated users could exploit incorrectly configured access controls. The issue is publicly do...
CVE-2023-49756
CVE-2023-49756 refers to WordPress Eventin plugin
CVE-2023-49755
CVE-2023-49755 affects WordPress plugin Elementor Timeline Widget (
CVE-2023-49757
CVE-2023-49757 concerns WordPress Awesome Support plugin in versions up to 6.1.10, with a Missing Authorization vulnerability due to incorrectly configured access control. Public disclosures and patch data indicate the issue is being addressed, with a fix released in version 6.1.11. Recommended r...
CVE-2023-49758
CVE-2023-49758 concerns the WordPress plugin WP Booking System. The issue is a Missing Authorization flaw in wpbs_save_calendar_data that allowed authenticated users (subscriber level and above) to save calendar data on affected versions. Vulnerable range:
CVE-2023-49817
CVE-2023-49817 affects the WordPress plugin Flexible Woocommerce Checkout Field Editor (
CVE-2023-49835
CVE-2023-49835 affects the WordPress plugin Post Duplicator (versions up to 2.31). The issue is described as a Missing Authorization / Broken Access Control vulnerability allowing unauthorized access due to incorrectly configured access control. The vulnerability and its CVE are corroborated by P...
CVE-2023-49848
CVE-2023-49848 is a missing/ broken authorization vulnerability in the WordPress Sharkdropship Dropshipping plugin for AliExpress, eBay, Amazon, Etsy (SharkDropship & Affiliate for AliExpress, etc.). Affected versions are up to 2.1.1; exploitation arises from an incorrectly configured access cont...
CVE-2023-49849
CVE-2023-49849 affects WordPress plugin Shortcoder (versions
CVE-2023-49851
CVE-2023-49851 affects the WordPress Square Thumbnails plugin (
CVE-2023-49856
CVE-2023-49856 affects WordPress plugin Smart Forms (
CVE-2023-50877
CVE-2023-50877 — Missing Authorization in the WordPress plugin Product Filter by WBW (WBW) affecting versions up to 2.5.0 . Root cause: Broken Access Control / Missing Authorization . Public references confirm the issue exists across multiple feeds (NVD, Red Hat, CIRCL) with a base CVSS 3.1/3.1 v...
CVE-2023-50904
CVE-2023-50904: A Missing Authorization vulnerability in WordPress Poll Maker (up to version 4.8.0) arises from incorrectly configured access control. Exploitation could allow unauthorized actions due to insufficient authorization checks. Public advisories in multiple sources confirm the issue an...
CVE-2023-51353
CVE-2023-51353 affects the WordPress Popup by Supsystic plugin up to version 1.10.19. The root cause is broken/ missing authorization (Broken Access Control), enabling unauthenticated or low-privilege users to exploit access control to sensitive information via the getWpCsvList action. Reported i...
CVE-2023-51355
CVE-2023-51355 is a Missing Authorization vulnerability in MultiVendorX WC Marketplace (MVX) for WordPress/WooCommerce. Affected versions are MVX up to 4.0.23, with the root cause described as incorrectly configured access control security levels that allow bypassing authorization checks. Public ...