231554 matches found
CVE-2023-49859
CVE-2023-49859 concerns WordPress plugin Login With Ajax (
CVE-2023-49835
CVE-2023-49835 affects the WordPress plugin Post Duplicator (versions up to 2.31). The issue is described as a Missing Authorization / Broken Access Control vulnerability allowing unauthorized access due to incorrectly configured access control. The vulnerability and its CVE are corroborated by P...
CVE-2023-49849
CVE-2023-49849 affects WordPress plugin Shortcoder (versions
CVE-2023-49850
CVE-2023-49850 – WordPress WP Simple HTML Sitemap : Affected plugin versions are ≤ 2.7. Root cause is broken access control due to missing authorization checks, allowing unauthenticated access to perform an unauthorized action. CVSS v3.1 base score is 5.3 (Medium) per Patchstack, and reports cons...
CVE-2023-49851
CVE-2023-49851 affects the WordPress Square Thumbnails plugin (
CVE-2023-49856
CVE-2023-49856 affects WordPress plugin Smart Forms (
CVE-2023-50877
CVE-2023-50877 — Missing Authorization in the WordPress plugin Product Filter by WBW (WBW) affecting versions up to 2.5.0 . Root cause: Broken Access Control / Missing Authorization . Public references confirm the issue exists across multiple feeds (NVD, Red Hat, CIRCL) with a base CVSS 3.1/3.1 v...
CVE-2023-50884
CVE-2023-50884 concerns LA-Studio Element Kit for Elementor. Affected: LA-Studio Element Kit for Elementor 1.1.5 per the PT Security advisory; details on exact fixed version are not specified beyond “later than 1.1.5.” Monitor for updates from official advisories for precise patched build.
CVE-2023-50904
CVE-2023-50904: A Missing Authorization vulnerability in WordPress Poll Maker (up to version 4.8.0) arises from incorrectly configured access control. Exploitation could allow unauthorized actions due to insufficient authorization checks. Public advisories in multiple sources confirm the issue an...
CVE-2023-51353
CVE-2023-51353 affects the WordPress Popup by Supsystic plugin up to version 1.10.19. The root cause is broken/ missing authorization (Broken Access Control), enabling unauthenticated or low-privilege users to exploit access control to sensitive information via the getWpCsvList action. Reported i...
CVE-2023-51355
CVE-2023-51355 is a Missing Authorization vulnerability in MultiVendorX WC Marketplace (MVX) for WordPress/WooCommerce. Affected versions are MVX up to 4.0.23, with the root cause described as incorrectly configured access control security levels that allow bypassing authorization checks. Public ...
CVE-2023-51360
CVE-2023-51360 affects the WordPress plugin Essential Blocks for Gutenberg (vulnerable:
CVE-2023-51359
CVE-2023-51359 affects WPDeveloper Essential Blocks for Gutenberg (
CVE-2023-51362
CVE-2023-51362 affects the WordPress plugin All-in-one Floating Contact Form – My Sticky Elements (versions ≤ 2.1.3). It describes a Missing Authorization/ improper access control vulnerability with a CVSS v3.1 base score of 5.3 (Medium). Multiple connected sources corroborate a broken access con...
CVE-2023-49845
CVE-2023-49845 is a Broken Access Control vulnerability affecting the WordPress Redirects plugin (versions up to and including 1.2.1, Loud Dog Redirects naming in some sources). The root cause described across sources is “Missing Authorization” / incorrectly configured access control, enabling an...
SUSE: Security Advisory (SUSE-SU-2024:4079-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:4202-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2024-0388)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for the Linux Kernel (Live Patch 46 for SLE 15 SP3) (SUSE-SU-2024:4161-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...