WordPress Mail Bank - #1 Mail SMTP Plugin for WordPress Plugin <= 4.0.14 is vulnerable to Broken Access Control

Software Mail Bank - 1 Mail SMTP Plugin for WordPress Type Plugin Vulnerable versions = 4.0.14 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48332 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID c3252a05c63c...

WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload

Software Mollie Payments for WooCommerce Type Plugin Vulnerable versions = 7.3.11 Fixed in 7.3.12 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-6090 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 5c0982698e82 Credits Rafie Muhammad...

WordPress Salon booking system Plugin < 8.7 is vulnerable to Privilege Escalation

Software Salon booking system Type Plugin Vulnerable versions 8.7 Fixed in 8.7 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2023-48319 Patch priority Medium CVSS severity Medium 6.8 Developer Claim ownership PSID 1c2a0bce4628 Credits lttn Required privilege...

WordPress Super Progressive Web Apps Plugin <= 2.2.21 is vulnerable to Broken Access Control

Software Super Progressive Web Apps Type Plugin Vulnerable versions = 2.2.21 Fixed in 2.2.22 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48277 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 68d6cfa8ebcc Credits Abdi Prana...

WordPress WCMultiShipping Plugin <= 2.3.5 is vulnerable to Broken Access Control

Software WCMultiShipping Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48274 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ae6198f38515 Credits Abdi Pranata Required...

pcre2:pcre2_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5792151736549376 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerubsanpcre2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffddd1a9ffc Crash State: NULL Sanitizer: undefined UBSAN Recommended...

WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Perfmatters Type Plugin Vulnerable versions = 2.1.6 Fixed in 2.1.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47876 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e0a42388bb5d Credits Dave Jong Patchstack Required...

WordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Perfmatters Type Plugin Vulnerable versions 2.2.0 Fixed in 2.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47877 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 95a1cb6cdea5 Credits Dave Jong Patchstack Required privileg...

WordPress Userpro Plugin <= 5.1.1 is vulnerable to Sensitive Data Exposure

Software Userpro Type Plugin Vulnerable versions = 5.1.1 Fixed in 5.1.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-2446 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 60ff01fd740b Credits István Márton Required...

WordPress WP Githuber MD Plugin <= 1.16.2 is vulnerable to Arbitrary File Upload

Software WP Githuber MD Type Plugin Vulnerable versions = 1.16.2 Fixed in 1.16.3 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-47846 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID b732ced6291a Credits Rafie Muhammad Patchstack Required...

WordPress CataBlog Plugin <= 1.7.0 is vulnerable to Arbitrary File Deletion

Software CataBlog Type Plugin Vulnerable versions = 1.7.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-47843 Patch priority Medium CVSS severity Medium 7.6 Developer Claim ownership PSID 9a8041fb49de Credits Rafie Muhammad Patchstack...

WordPress BlossomThemes Email Newsletter Plugin <= 2.2.4 is vulnerable to Broken Access Control

Software BlossomThemes Email Newsletter Type Plugin Vulnerable versions = 2.2.4 Fixed in 2.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47849 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 051053384c38 Credits Abdi...

WordPress SearchIQ Plugin <= 4.4 is vulnerable to Broken Access Control

Software SearchIQ Type Plugin Vulnerable versions = 4.4 Fixed in 4.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47832 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID ebe24eb2b5d2 Credits Mika Required privilege...

WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control

Software Events Addon for Elementor Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47827 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5dbac8531308 Credits Abdi Pranata...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6211679872221184 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

WordPress Acme Fix Images Plugin <= 1.0.0 is vulnerable to Broken Access Control

Software Acme Fix Images Type Plugin Vulnerable versions = 1.0.0 Fixed in 2.0.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47793 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 51b5ada66dce Credits Abdi Pranata Required...

WordPress Welcart e-Commerce Plugin < 2.9.6 is vulnerable to PHP Object Injection

Software Welcart e-Commerce Type Plugin Vulnerable versions 2.9.6 Fixed in 2.9.6 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE N/A Patch priority Medium CVSS severity Medium 4.4 Developer Claim ownership PSID dd10708cfd4f Credits WordFence Required privilege Published 15...

WordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)

Software Accordion Type Plugin Vulnerable versions = 2.6 Fixed in 2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47809 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID 6cba203c1a98 Credits Ngô Thiên An ancorn from VNPT-VCI Required...

WordPress 10WebAnalytics Plugin <= 1.2.12 is vulnerable to Broken Access Control

Software 10WebAnalytics Type Plugin Vulnerable versions = 1.2.12 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47807 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID a7d2ad869475 Credits Abdi Pranata Required...

WordPress WPCafe Plugin <= 2.2.22 is vulnerable to Broken Access Control

Software WPCafe Type Plugin Vulnerable versions = 2.2.22 Fixed in 2.2.23 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47805 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID b94e1d5fde71 Credits Abdi Pranata Required privileg...