231585 matches found
CVE-2023-49756
CVE-2023-49756 refers to WordPress Eventin plugin
CVE-2023-49755
CVE-2023-49755 affects WordPress plugin Elementor Timeline Widget (
CVE-2023-49758
CVE-2023-49758 concerns the WordPress plugin WP Booking System. The issue is a Missing Authorization flaw in wpbs_save_calendar_data that allowed authenticated users (subscriber level and above) to save calendar data on affected versions. Vulnerable range:
CVE-2023-49817
CVE-2023-49817 affects the WordPress plugin Flexible Woocommerce Checkout Field Editor (
CVE-2023-49818
CVE-2023-49818 affects the WordPress plugin Webflow Pages (Webflow Pages) up to version 1.0.8. The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access. CVSS v3.1 base score is 5.3 (Medium). Red Hat and Patchs...
CVE-2023-49861
CVE-2023-49861 describes a Missing Authorization vulnerability in the WordPress plugin Social Media Feather (versions ≤ 2.1.3). The issue is attributed to broken access control / improperly configured access security levels , enabling unauthorized access to privileged functions. The CVE entry lis...
CVE-2023-49831
CVE-2023-49831 is a Missing Authorization (Broken Access Control) vulnerability in WordPress plugin RegistrationMagic (RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login) affecting versions up to 5.2.3.0. The issue, arising from incorrectly configured access...
CVE-2023-49859
CVE-2023-49859 concerns WordPress plugin Login With Ajax (
CVE-2023-49835
CVE-2023-49835 affects the WordPress plugin Post Duplicator (versions up to 2.31). The issue is described as a Missing Authorization / Broken Access Control vulnerability allowing unauthorized access due to incorrectly configured access control. The vulnerability and its CVE are corroborated by P...
CVE-2023-49849
CVE-2023-49849 affects WordPress plugin Shortcoder (versions
CVE-2023-49850
CVE-2023-49850 – WordPress WP Simple HTML Sitemap : Affected plugin versions are ≤ 2.7. Root cause is broken access control due to missing authorization checks, allowing unauthenticated access to perform an unauthorized action. CVSS v3.1 base score is 5.3 (Medium) per Patchstack, and reports cons...
CVE-2023-49851
CVE-2023-49851 affects the WordPress Square Thumbnails plugin (
CVE-2023-49856
CVE-2023-49856 affects WordPress plugin Smart Forms (
CVE-2023-50877
CVE-2023-50877 — Missing Authorization in the WordPress plugin Product Filter by WBW (WBW) affecting versions up to 2.5.0 . Root cause: Broken Access Control / Missing Authorization . Public references confirm the issue exists across multiple feeds (NVD, Red Hat, CIRCL) with a base CVSS 3.1/3.1 v...
CVE-2023-50884
CVE-2023-50884 concerns LA-Studio Element Kit for Elementor. Affected: LA-Studio Element Kit for Elementor 1.1.5 per the PT Security advisory; details on exact fixed version are not specified beyond “later than 1.1.5.” Monitor for updates from official advisories for precise patched build.
CVE-2023-50904
CVE-2023-50904: A Missing Authorization vulnerability in WordPress Poll Maker (up to version 4.8.0) arises from incorrectly configured access control. Exploitation could allow unauthorized actions due to insufficient authorization checks. Public advisories in multiple sources confirm the issue an...
CVE-2023-51353
CVE-2023-51353 affects the WordPress Popup by Supsystic plugin up to version 1.10.19. The root cause is broken/ missing authorization (Broken Access Control), enabling unauthenticated or low-privilege users to exploit access control to sensitive information via the getWpCsvList action. Reported i...
CVE-2023-51355
CVE-2023-51355 is a Missing Authorization vulnerability in MultiVendorX WC Marketplace (MVX) for WordPress/WooCommerce. Affected versions are MVX up to 4.0.23, with the root cause described as incorrectly configured access control security levels that allow bypassing authorization checks. Public ...