CVE-2023-47869

The CVE-2023-47869 issue concerns the WordPress plugin wpForo Forum, affected up to version 2.2.5. Connected data indicates a Content Injection/Broken Access Control vulnerability arising from improper handling of script-related HTML in web pages, enabling code injection. Patchstack specifies tha...

CVE-2023-47871

CVE-2023-47871 concerns the WordPress plugin Contact Form to Any API (<= 1.1.6). Connected sources confirm a Broken Access Control/Missing Authorization vulnerability in the plugin, allowing unintended access to API-related functionality. PatchStack lists the affected version range

CVE-2023-48286

CVE-2023-48286 concerns the WordPress Stripe Payments plugin (Accept Stripe Payments) ≤ 2.0.79, with a Missing Authorization/ Broken Access Control vulnerability due to incorrectly configured access controls. Public-facing unauthenticated users could potentially exploit the issue due to unauthent...

CVE-2023-48287

CVE-2023-48287 relates to the WordPress TextMe SMS plugin, affected versions 1.9.0 and earlier, which exhibits a Broken Access Control/Missing Authorization vulnerability. The issue allows exploitation of improperly configured access controls (as described by PatchStack, with references to a brok...

CVE-2023-48324

CVE-2023-48324 relates to a Broken Access Control vulnerability in WordPress plugin Awesome Support up to version 6.1.4. The issue is described as missing authorization allowing exploitation of incorrectly configured access control security levels. Public sources in the connected data identify af...

CVE-2023-48774

CVE-2023-48774 affects the WordPress IdeaPush plugin (versions

CVE-2023-48776

CVE-2023-48776 affects the WordPress canvasio3D Light plugin (

CVE-2023-48779

CVE-2023-48779 pertains to WordPress 360 Javascript Viewer (plugin) with Broken Access Control via Missing Authorization. Affected versions are

CVE-2023-49158

CVE-2023-49158 affects the WordPress plugin LadiApp (LadiPage) and permits Stored XSS due to improper input neutralization during web page generation. Affected: LadiApp versions up to 4.4. Root cause: inadequate sanitization of input when generating pages. Impact: stored cross-site scripting coul...

CVE-2023-49167

CVE-2023-49167 affects the WordPress Database for CF7 plugin (

CVE-2023-49192

CVE-2023-49192 concerns the WordPress plugin Enhanced Text Widget (Clever Widgets)

CVE-2023-49193

CVE-2023-49193 is a verifiable vulnerability in the WordPress plugin Social Pug (Hubbub Lite) : versions up to and including 1.30.0 allow a Missing Authorization / Broken Access Control condition. Unauthenticated users could exploit incorrectly configured access controls. The issue is publicly do...

CVE-2023-49754

CVE-2023-49754 concerns the WordPress plugin Bulk Edit Post Titles (

CVE-2023-49756

CVE-2023-49756 refers to WordPress Eventin plugin

CVE-2023-49755

CVE-2023-49755 affects WordPress plugin Elementor Timeline Widget (

CVE-2023-49758

CVE-2023-49758 concerns the WordPress plugin WP Booking System. The issue is a Missing Authorization flaw in wpbs_save_calendar_data that allowed authenticated users (subscriber level and above) to save calendar data on affected versions. Vulnerable range:

CVE-2023-49817

CVE-2023-49817 affects the WordPress plugin Flexible Woocommerce Checkout Field Editor (

CVE-2023-49818

CVE-2023-49818 affects the WordPress plugin Webflow Pages (Webflow Pages) up to version 1.0.8. The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access. CVSS v3.1 base score is 5.3 (Medium). Red Hat and Patchs...

CVE-2023-49861

CVE-2023-49861 describes a Missing Authorization vulnerability in the WordPress plugin Social Media Feather (versions ≤ 2.1.3). The issue is attributed to broken access control / improperly configured access security levels , enabling unauthorized access to privileged functions. The CVE entry lis...

CVE-2023-49831

CVE-2023-49831 is a Missing Authorization (Broken Access Control) vulnerability in WordPress plugin RegistrationMagic (RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login) affecting versions up to 5.2.3.0. The issue, arising from incorrectly configured access...