WordPress Popup Anything Plugin <= 2.7 is vulnerable to Broken Access Control

Software Popup Anything Type Plugin Vulnerable versions = 2.7 Fixed in 2.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 4b0a6b545433 Credits Abdi Pranata Required...

WordPress WP Logo Showcase Responsive Slider and Carousel Plugin <= 3.6 is vulnerable to Broken Access Control

Software WP Logo Showcase Responsive Slider and Carousel Type Plugin Vulnerable versions = 3.6 Fixed in 3.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 6513d49257c3...

WordPress Animator Plugin <= 3.0.10 is vulnerable to Broken Access Control

Software Animator Type Plugin Vulnerable versions = 3.0.10 Fixed in 3.0.11 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47689 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d20181d6d40f Credits Elliot Required privilege...

WordPress WP Featured Content and Slider Plugin <= 1.6 is vulnerable to Broken Access Control

Software WP Featured Content and Slider Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 1176a8e895c8 Credits Abdi Pranata...

WordPress Additional Order Filters for WooCommerce Plugin <= 1.11 is vulnerable to Cross Site Scripting (XSS)

Software Additional Order Filters for WooCommerce Type Plugin Vulnerable versions = 1.11 Fixed in 1.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47690 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b716b645579a...

WordPress WP Blog and Widget Plugin <= 2.5 is vulnerable to Broken Access Control

Software WP Blog and Widget Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 2eb15fc7bcca Credits Abdi Pranata Required...

WordPress WP Responsive Recent Post Slider/Carousel Plugin <= 3.4 is vulnerable to Broken Access Control

Software WP Responsive Recent Post Slider/Carousel Type Plugin Vulnerable versions = 3.4 Fixed in 3.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 9480041e2654 Credits...

WordPress WP Event Manager Plugin <= 3.1.42 is vulnerable to Cross Site Scripting (XSS)

Software WP Event Manager Type Plugin Vulnerable versions = 3.1.42 Fixed in 3.1.43 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47697 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 316eeef87a14 Credits LEE SE HYOUNG...

USN-6425-1: Samba vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Sri Nagasubramanian discovered that the Samba aclxattr VFS module incorrectly handled read-only files. When Samba is configured to ignore system ACLs, a remote attacker could possibly use this issue to...

USN-6467-2: Kerberos vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description USN-6467-1 fixed a vulnerability in Kerberos. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04. Original advisory details: Robert Morris discovered tha...

WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Plainview Protect Passwords Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47665 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c0503491a942 Credits Mika...

WordPress WordPress Backup & Migration Plugin < 1.4.5 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Backup & Migration Type Plugin Vulnerable versions 1.4.5 Fixed in 1.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5738 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 9b9d4e9b2aa2 Credits Krzyszt...

WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Category Post List Widget Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de7a709c5e66 Credits LEE SE HYOU...

WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)

Software SendPress Newsletters Type Plugin Vulnerable versions = 1.23.11.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47517 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9cc0e2ff8594 Credits Le Ngoc A...

WordPress Q2W3 Post Order Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Q2W3 Post Order Type Plugin Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47521 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cb5de227d10d Credits Le Ngoc Anh Require...

WordPress ImageMapper Plugin <= 1.2.6 is vulnerable to Broken Access Control

Software ImageMapper Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-5506 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 273249a3fdc4 Credits Lana Codes Required privilege...

WordPress MSHOP MY SITE Plugin <= 1.1.7 is vulnerable to Broken Access Control

Software MSHOP MY SITE Type Plugin Vulnerable versions = 1.1.7 Fixed in 1.1.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47243 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID c5bc4e63dd3e Credits Abdi Pranata Required...

WordPress Rename Media Files Plugin <= 1.0.1 is vulnerable to Remote Code Execution (RCE)

Software Rename Media Files Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-32095 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID c2971a04bd19 Credits Taihei Shimamine Required...

WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection

Software Redirect 404 Error Page to Homepage or Custom Page with Logs Type Plugin Vulnerable versions = 1.8.7 Fixed in 1.8.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-47530 Patch priority Medium CVSS severity Medium 7.6 Developer Claim ownership PSID c586c5b28368 Credit...

WordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Edit WooCommerce Templates Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47509 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1d751e50449c Credits LEE SE...