231585 matches found
CVE-2023-41870
CVE-2023-41870 affects the WP Crowdfunding plugin by Themeum (WordPress) up to version 2.1.5. The issue is a Missing Authorization/Improper Access Control vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access to restricted areas. Red Hat and P...
CVE-2023-41869
CVE-2023-41869 affects the WordPress plugin WP Accessibility Helper (WAH) up to version 0.6.2.4. The issue is a Missing Authorization via AJAX action that leads to Broken Access Control. Documented impact is described as allowing exploitation of incorrectly configured access control levels, with ...
CVE-2023-41866
The CVE-2023-41866 entry concerns the WordPress plugin Automatic YouTube Gallery. It describes a Missing Authorization/Broken Access Control vulnerability in which access control checks were incorrectly configured, exploitable via AJAX actions. Affected version range:
CVE-2023-41865
CVE-2023-41865 : Slider Pro (WordPress plugin) ≤ 4.8.6 has a Broken Access Control issue where missing authorization on AJAX actions could allow unauthorized access. The vulnerability’s root cause is an insufficient access check on AJAX endpoints. Impact is limited to the affected plugin version ...
CVE-2023-41862
CVE-2023-41862 describes a weak/broken authentication issue in the WordPress plugin VS Contact Form (Very Simple Contact Form) affecting versions up to 14.0. Reported as an authentication abuse vulnerability, the CVE’s base CVSS v3.1 score is 5.3 (Medium). Connected sources indicate the vendor fi...
CVE-2023-41857
CVE-2023-41857 affects the WordPress Click To Tweet plugin up to version 2.0.14, described as a Missing Authorization / Broken Access Control vulnerability. The initial description and connected entries do not provide an explicit remediation or patched version. CVSS v3.1 base score is 5.4 (Medium...
CVE-2023-41803
CVE-2023-41803 : BitPay Checkout for WooCommerce (WordPress plugin) up to version 4.1.0 is affected by a Broken Access Control vulnerability due to missing authorization checks. The issue allows unauthenticated users to exploit inadequate access configuration to perform unauthorized actions. The ...
CVE-2023-41848
CVE-2023-41848 affects the WordPress Carousel Slider plugin, versions
CVE-2023-41802
CVE-2023-41802 affects WordPress Plugin Super Socializer (Team Heateor) up to version 7.13.54. It is a Missing Authorization / Broken Access Control vulnerability enabling exploitation of improperly configured access control security levels. Public sources in Connected documents confirm affected ...
CVE-2023-41690
CVE-2023-41690: WordPress WiserNotify Social Proof plugin <= 2.5 suffers a Broken Access Control flaw that allows unauthenticated access due to missing authorization checks. The CVE is tracked for WiserNotify Social Proof (WordPress plugin). Connected sources confirm affected versions up to 2....
CVE-2023-41688
CVE-2023-41688 affects WordPress Bulk NoIndex & NoFollow Toolkit (Mad Fish Digital) up to version 1.5, due to Broken Access Control / Missing Authorization. Public sources list a CVSS v3.1 base score of 5.4 (Medium) with network attack vector and low privileges required. Patchstack notes the fix ...
CVE-2023-41683
CVE-2023-41683 (TelSender WordPress plugin) : The vulnerability is a Missing Authorization flaw in TelSender that allows exploitation of an incorrectly configured access control security level. Affected: TelSender versions
CVE-2023-41664
CVE-2023-41664 corresponds to a Missing Authorization flaw in the WordPress plugin Easy Newsletter Signups (
CVE-2023-41649
CVE-2023-41649 affects the WordPress plugin Ovic Product Bundle (versions up to 1.1.2). The issue is a Missing Authorization / Broken Access Control vulnerability that allows unauthenticated users to exploit misconfigured access controls. Across connected records, there is no published patch vers...
CVE-2023-41133
CVE-2023-41133 is a WordPress plugin vulnerability in Secure Admin IP (versions
CVE-2023-41130
CVE-2023-41130 concerns the WordPress plugin Premmerce User Roles (Premmerce) where a missing authorization check in role-management functions leads to a Broken Access Control vulnerability. Affected versions are
CVE-2023-41132
CVE-2023-41132 relates to the WordPress plugin Category Slider for WooCommerce (
CVE-2023-40005
Technical details (affected product, vulnerable components, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from official advisories and vendors for CVE-2023-40005.