CVE-2023-47183 WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through = 2.33.1...

CVE-2023-47180 WordPress Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin <= 2.16.0 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale Lite: from n/a through 2.16.0...

CVE-2024-51667

Missing Authorization vulnerability in paytiumsupport Paytium paytium.This issue affects Paytium: from n/a through = 4.4.10...

WordPress plugin WooCommerce Subscriptions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin... WordPress plugin...

CVE-2024-54381 WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through = 3.1.1...

CVE-2024-54369 WordPress Zita Site Builder plugin <= 1.0.2 - Arbitrary Plugin Installation and Activation vulnerability

Missing Authorization vulnerability in ThemeHunk Zita Site Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Zita Site Builder: from n/a through 1.0.2...

CVE-2024-56004 WordPress Easy Site Importer plugin <= 1.0.1 - Settings Change vulnerability

Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Site Importer: from n/a through = 1.0.1...

CVE-2024-54311 WordPress Mark New Posts plugin <= 7.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in i.lychkov Mark New Posts mark-new-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark New Posts: from n/a through = 7.5.1...

CVE-2024-54252

CVE-2024-54252 is a Missing Authorization (Broken Access Control) vulnerability affecting Pinpoint Booking System WordPress plugin versions up to 2.9.9.5.6 (and related 2.9.9.5.x lines). Public docs describe an access-control misconfiguration that could allow unauthorized access or actions within...

CVE-2023-40203

CVE-2023-40203: WordPress MailChimp Forms by MailMunch

CVE-2023-27456

CVE-2023-27456 is a missing-authorization vulnerability in the WordPress plugin/theme set for HashThemes Total (Total theme). It affects versions up to 2.1.19 and allows an authenticated user (subscriber) to activate arbitrary plugins due to incorrectly configured access control. The issue is cha...

PT-2024-13177 · Berocket · Berocket Brands For Woocommerce

Name of the Vulnerable Software and Affected Versions: BeRocket Brands for WooCommerce versions 3.8.2.2 and earlier Description: The issue affects the BeRocket Brands for WooCommerce plugin, allowing exploitation of incorrectly configured access control security levels due to a missing...

CVE-2023-25791

Missing Authorization vulnerability in Cadus Pro Fontiran allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fontiran: from n/a through 2.1...

CVE-2023-28416 WordPress Chankhe theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation vulnerability

Missing Authorization vulnerability in Sparkle Themes Chankhe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chankhe: from n/a through 1.0.5...

CVE-2023-29431

CVE-2023-29431 is a WordPress plugin vulnerability affecting the qTranslate X Cleanup and WPML Import feature in OntheGoSystems’ plugin. The issue is a Missing/Broken Authorization vulnerability (incorrectly configured access control) that affects versions from n/a up to 3.0.1. The vulnerability ...

CVE-2023-47832 WordPress SearchIQ plugin <= 4.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through = 4.4...

CVE-2023-49835 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

CVE-2023-49845 WordPress Redirects plugin <= 1.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in mattdeclaire Redirects redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirects: from n/a through = 1.2.1...

PT-2024-13794 · Unknown · Awesome Support

Name of the Vulnerable Software and Affected Versions: Awesome Support versions through 6.1.10 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions through...

CVE-2024-50417

CVE-2024-50417 is a Missing Authorization vulnerability affecting the Bold Page Builder WordPress plugin up to version 5.1.3, enabling exploitation through incorrectly configured access control. Multiple sources (NVD entry) specify a high-severity impact with CVSS v3.1 scores of 8.8 (I, A, C) and...