CVE-2023-37967 WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.2...

CVE-2023-37969 WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce wc-zelle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout with Zelle on Woocommerce: from n/a through = 3.1...

CVE-2023-37969 WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout with Zelle on Woocommerce: from n/a through 3.1...

CVE-2023-37887

CVE-2023-37887 describes a Missing Authorization vulnerability in WordPress plugin WPSchoolPress (versions up to 2.2.7). The underlying issue is an incorrectly configured access control that can allow an unauthorized user to access certain data or functions, constituting a Broken Access Control f...

CVE-2023-36681

The CVE-2023-36681 entry concerns the WordPress plugin Cryptocurrency Widgets – Price Ticker & Coins List (versions

CVE-2023-36531

CVE-2023-36531 concerns the WordPress plugin LiquidPoll – Advanced Polls for Creators and Brands (WP-Poll) with versions

CVE-2023-36528

CVE-2023-36528 relates to the WordPress plugin KK Star Ratings (versions ≤ 5.4.3). The vulnerability is described as a Missing Authorization issue that enables rate manipulation due to incorrectly configured access control. Public sources in the connected documents confirm affected software and t...

CVE-2023-36526

CVE-2023-36526 affects the WordPress plugin Duplicate Post Page Menu & Custom Post Type (versions

CVE-2023-36519 WordPress SW Product Bundles plugin <= 2.0.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPThemeGo SW Product Bundles sw-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SW Product Bundles: from n/a through = 2.0.15...

CVE-2023-36509

CVE-2023-36509 affects the WordPress CHP Ads Block Detector plugin. Multiple connected sources confirm a missing authorization check in the chp_abd_action function, enabling an unauthorized user to modify or reset plugin settings. Affected versions are up to 3.9.5 (per Red Hat/NVD references). Th...

CVE-2023-36506 WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Waiting List: from n/a through 2.13.0...

CVE-2023-35777 WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.1.2.2...

CVE-2023-35875

CVE-2023-35875 affects the Gutenverse (Gutenberg Blocks – Page Builder for Site Editor) WordPress plugin. According to Patchstack, versions

CVE-2023-35052

The CVE-2023-35052 entry concerns the WordPress Directorist plugin (Directorist) ≤ 7.5.4, with a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue is described across multiple sources as enabling Arbitrary Content Dele...

CVE-2023-35046

CVE-2023-35046 concerns the WordPress plugin Dynamic Visibility for Elementor . Affected: Dynamic Visibility for Elementor versions up to 5.0.5. Issue: Missing Authorization / broken access control due to incorrectly configured access control security levels. Impact: per sources, this results in ...

CVE-2023-34387 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Constant Contact Constant Contact Forms constant-contact-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through = 2.0.3...

CVE-2023-34381

CVE-2023-34381 refers to a WordPress Zippy plugin vulnerability (Zippy

CVE-2023-33998 WordPress Easy Social Icons plugin <= 3.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in cybernetikz Easy Social Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Icons: from n/a through 3.2.5...

CVE-2023-33996 WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in СleanTalk - Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spam protection, AntiSpam, FireWall by CleanTalk: from n/a through 6.10...

CVE-2023-33994

CVE-2023-33994 affects the WordPress Slimstat Analytics plugin, specifically versions up to and including 5.0.5.1. The root cause is a missing authorization check leading to Broken Access Control. The Patchstack entry confirms the vulnerability, with exposure under the plugin’s access control, an...