231554 matches found
CVE-2024-22157
CVE-2024-22157 is an unauthenticated privilege-escalation vulnerability in the WordPress plugin SalesKing (
CVE-2024-22145
CVE-2024-22145 : InstaWP Connect plugin for WordPress (= 0.1.0.9.
CVE-2024-21746
CVE-2024-21746 affects WP Ultimate Review plugin for WordPress, exposing an unauthenticated IP spoofing-based bypass that can bypass authentication and enable a functionality bypass. Public sources list vulnerable versions as <= 2.3.5 (and initial description cites
CVE-2024-4214
CVE-2024-4214 is a Basic XSS vulnerability in the WordPress Cardealer plugin (Car Dealer). The connected documents indicate an improper neutralization of script-related HTML tags in a Car Dealer web page, affecting the plugin versions up to 4.15. The sources do not provide concrete attack vectors...
CVE-2023-51546
CVE-2023-51546 is an authority-listed vulnerability in the WordPress plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels (affected: up to version 4.2.1). The issue stems from Improper Privilege Management that enables Privilege Escalation . The vulnerability affects...
CVE-2023-51483
CVE-2023-51483 affects Glowlogix WP Frontend Profile for WordPress. The vulnerability is an Unauthenticated Privilege Escalation caused by Improper Privilege Management in the plugin, impacting WP Frontend Profile versions up to 1.3.1. Public disclosures in the connected documents confirm the iss...
CVE-2023-51481
CVE-2023-51481 concerns the WordPress plugin “Local Delivery Drivers for WooCommerce.” Multiple sources confirm an improper privilege management flaw that enables unauthenticated privilege escalation, affecting versions up to 1.9.0 (vendor/plugin name varies slightly across sources). The issue is...
CVE-2023-51479
CVE-2023-51479 is an authenticated privilege-escalation vulnerability in the WordPress plugin Build App Online . The issue affects versions
CVE-2023-51476
The connected data confirms CVE-2023-51476 affects the WP MLM Unilevel WordPress plugin (
CVE-2023-51424
CVE-2023-51424 affects WebinarIgnition (WordPress Webinar plugin) up to version 3.05.0. The issue is an unauthenticated privilege escalation due to improper privilege management. Public details in Wordfence/EU listings show an in-the-wild risk with a CVSS v3.1 base score of 9.8 (CRITICAL), networ...
CVE-2023-51401
Technical details (affected version, root cause, exploit vectors, and patch status) for CVE-2023-51401 are not provided in the connected documents. Monitor vendor advisories and CVE records for updates and remediation specifics.
CVE-2023-51398
CVE-2023-51398 is an authentication‑related vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder. The issue stems from improper privilege management that enables Privilege Escalation for authenticated users (Contributor+), potentially granting higher privileges than allowed. Affec...
CVE-2023-51356
CVE-2023-51356 corresponds to an Imp roper Privilege Management vulnerability in Repute Infosystems ARMember (WordPress plugin) affecting ARMember up to version 4.0.10. The issue allows Privilege Escalation for authenticated users (Subscriber+). The CVE details in connected sources indicate that ...
CVE-2023-50890
The CVE-2023-50890 entry concerns the WordPress plugin Ultimate Addons for Elementor (Brainstorm Force) up to version 1.36.20, affected by an Improper Privilege Management vulnerability that enables Privilege Escalation. Public sources consistently describe the impact as escalation of privileges ...
CVE-2023-48319
CVE-2023-48319 affects the WordPress plugin Salon booking system (salon-booking-system) up to version 8.6. It is an Improper Privilege Management vulnerability that enables Privilege Escalation for users with Editor-level access, potentially granting Administrator privileges. The issue is fixed i...
CVE-2023-47782
CVE-2023-47782 pertains to Thrive Theme Builder prior to version 3.24.0 and is an authenticated privilege-escalation vulnerability. Public documentation confirms that an authenticated user with Subscriber privileges could elevate their access due to improper privilege management in Thrive Theme B...
CVE-2023-47683
The CVE-2023-47683 entry concerns the miniOrange WordPress Social Login and Register plugin (Discord, Google, Twitter, LinkedIn). The root cause is improper privilege management that allows authenticated users with Subscriber access to escalate to Administrator. Affected versions are up to 7.6.6;...
CVE-2023-47682
CVE-2023-47682 affects the WordPress WP User Frontend plugin (versions ≤3.6.5). The issue is improper privilege management that allows authenticated users (author level and above) to escalate privileges, potentially enabling admin-level access via the registration_form function. The vulnerability...
CVE-2023-47679
CVE-2023-47679 describes a Local File Inclusion (path traversal) vulnerability in the WordPress plugin Qi Addons For Elementor by QODE Interactive. Affected versions are 1.6.3 and earlier; the issue stems from improper limitation of a pathname to a restricted directory, enabling inclusion of loca...