231585 matches found
CVE-2023-47830
CVE-2023-47830 is a WordPress plugin vulnerability in Live Preview for Contact Form 7, affecting versions
CVE-2023-47836
CVE-2023-47836 affects the WP Meta and Date Remover plugin for WordPress, specifically versions
CVE-2023-47832
CVE-2023-47832 affects the WordPress SearchIQ plugin (versions
CVE-2023-47838
CVE-2023-47838 affects the WordPress plugin Conditional Fields for Contact Form 7 (cf7-conditional-fields). Root cause: Missing Authorization / Broken Access Control due to incorrectly configured access control levels, allowing exploitation by low-privilege users. Affected versions:
CVE-2023-47841
CVE-2023-47841 affects the WordPress plugin Analytify (
CVE-2023-47847
The CVE CVE-2023-47847 refers to a Missing Authorization vulnerability in the PayTR Taksit Tablosu WordPress plugin (WooCommerce integration). The vulnerability arises from incorrectly configured access control levels, i.e., a Broken Access Control issue that allows exploiting insufficient author...
CVE-2023-47869
The CVE-2023-47869 issue concerns the WordPress plugin wpForo Forum, affected up to version 2.2.5. Connected data indicates a Content Injection/Broken Access Control vulnerability arising from improper handling of script-related HTML in web pages, enabling code injection. Patchstack specifies tha...
CVE-2023-47849
CVE-2023-47849 affects the BlossomThemes Email Newsletter WordPress plugin. The issue is a Missing Authorization / Broken Access Control in the bten_get_mailing_list workflow, allowing unauthenticated access to mailing list data for versions up to and including 2.2.4. The vulnerability’s CVSS v3....
CVE-2023-47871
CVE-2023-47871 concerns the WordPress plugin Contact Form to Any API (<= 1.1.6). Connected sources confirm a Broken Access Control/Missing Authorization vulnerability in the plugin, allowing unintended access to API-related functionality. PatchStack lists the affected version range
CVE-2023-48286
CVE-2023-48286 concerns the WordPress Stripe Payments plugin (Accept Stripe Payments) ≤ 2.0.79, with a Missing Authorization/ Broken Access Control vulnerability due to incorrectly configured access controls. Public-facing unauthenticated users could potentially exploit the issue due to unauthent...
CVE-2023-48287
CVE-2023-48287 relates to the WordPress TextMe SMS plugin, affected versions 1.9.0 and earlier, which exhibits a Broken Access Control/Missing Authorization vulnerability. The issue allows exploitation of improperly configured access controls (as described by PatchStack, with references to a brok...
CVE-2023-48324
CVE-2023-48324 relates to a Broken Access Control vulnerability in WordPress plugin Awesome Support up to version 6.1.4. The issue is described as missing authorization allowing exploitation of incorrectly configured access control security levels. Public sources in the connected data identify af...
CVE-2023-48774
CVE-2023-48774 affects the WordPress IdeaPush plugin (versions
CVE-2023-48776
CVE-2023-48776 affects the WordPress canvasio3D Light plugin (
CVE-2023-48779
CVE-2023-48779 pertains to WordPress 360 Javascript Viewer (plugin) with Broken Access Control via Missing Authorization. Affected versions are
CVE-2023-49158
CVE-2023-49158 affects the WordPress plugin LadiApp (LadiPage) and permits Stored XSS due to improper input neutralization during web page generation. Affected: LadiApp versions up to 4.4. Root cause: inadequate sanitization of input when generating pages. Impact: stored cross-site scripting coul...
CVE-2023-49167
CVE-2023-49167 affects the WordPress Database for CF7 plugin (
CVE-2023-49192
CVE-2023-49192 concerns the WordPress plugin Enhanced Text Widget (Clever Widgets)
CVE-2023-49193
CVE-2023-49193 is a verifiable vulnerability in the WordPress plugin Social Pug (Hubbub Lite) : versions up to and including 1.30.0 allow a Missing Authorization / Broken Access Control condition. Unauthenticated users could exploit incorrectly configured access controls. The issue is publicly do...