231554 matches found
CVE-2023-46635
CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...
CVE-2023-46633
CVE-2023-46633: WordPress WP Glossary plugin
CVE-2023-46631
CVE-2023-46631 affects the WordPress plugin Product Recommendation Quiz for eCommerce (versions
CVE-2023-46628
CVE-2023-46628 affects WP Word Count
CVE-2023-46616
CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)
CVE-2023-46612
CVE-2023-46612 describes a Missing Authorization vulnerability in the Mediabay Mediabay-lite WordPress plugin. The issue is a broken/insufficient access control that could allow unauthorized actions within Mediabay’s file management/features. Technical details in connected sources confirm affecte...
CVE-2023-46611
CVE-2023-46611 concerns the WordPress YOP Poll plugin (
CVE-2023-46610
CVE-2023-46610 relates to WordPress plugin Quill Forms (
CVE-2023-46609
CVE-2023-46609 concerns the WordPress FeedFocal plugin (<= 1.2.2), where Missing Authorization/Broken Access Control allows unauthenticated attackers to exploit access-control misconfigurations. Public records indicate affected versions are
CVE-2023-46607
CVE-2023-46607 affects the WP iCal Availability WordPress plugin. Affected versions are
CVE-2023-46605
CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions
CVE-2023-46606
CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions
CVE-2023-46309
CVE-2023-46309 affects WordPress plugin wpDiscuz prior to version 7.6.11, where a Missing Authorization flaw in access control allows unauthenticated users to perform restricted actions due to broken access control. Publicly known details indicate the affected range is wpDiscuz
CVE-2023-46206
CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...
CVE-2023-46196
CVE-2023-46196 affects the WordPress plugin Social proof testimonials and reviews by Repuso (plugin slug: social-testimonials-and-reviews-widget), vulnerable in versions up to and including 4.97 due to missing authorization (Broken Access Control). The issue allows interaction with data or featur...
CVE-2023-46195
CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)
CVE-2023-46082
CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...
CVE-2023-46083
CVE-2023-46083 concerns the Kali Forms WordPress plugin (Contact Form builder with drag & drop). Affected versions are Kali Forms