CVE-2023-47788

CVE-2023-47788 affects WordPress Jetpack plugin prior to version 12.7, due to a Missing Authorization/Broken Access Control in WPCom External Media REST endpoints. Affected software: Jetpack before 12.7. Root cause: missing authorization checks allowing unauthorized access to external media REST ...

CVE-2023-48759

CVE-2023-48759 is a Missing Authorization vulnerability in Crocoblock JetElements For Elementor (affected: Elementor JetElements <= 2.6.13). The issue allows unauthenticated users to download arbitrary attachments due to a missing authorization check on the download path (arbitrary attachment ...

CVE-2023-51495

CVE-2023-51495 relates to the WooCommerce Warranty Requests WordPress plugin. Affected product: WooCommerce Warranty Requests (plugin slug woocommerce-warranty) up to version 2.2.7. Description in sources: a Missing Authorization vulnerability (Broken Access Control) that could allow unauthentica...

CVE-2023-51497

CVE-2023-51497 corresponds to a Missing Authorization (Broken Access Control) vulnerability affecting the WordPress WooCommerce Ship to Multiple Addresses plugin up to version 3.8.9. Public sources (NVD, Red Hat, and PTSecurity enrichment) indicate an authorization flaw that could allow bypass of...

CVE-2023-51507

Technical details about CVE-2023-51507 are not provided in the supplied documents. No explicit affected versions beyond 8.1.16 or remediation steps are listed; monitor for updates.

CVE-2023-51516

CVE-2023-51516 is a Missing Authorization vulnerability (Broken Access Control) affecting the WordPress plugin “Business Directory Plugin – Easy Listing Directories for WordPress” up to version 6.3.9. The root cause, per provided documents, is a dispatch-related authorization issue. Connected sou...

CVE-2023-51523

CVE-2023-51523 is a Missing Authorization (Broken Access Control) vulnerability affecting the WordPress plugin WooCommerce Easy Duplicate Product (

CVE-2023-44234

CVE-2023-44234 affects the WordPress WP GPX Maps plugin (WP GPX Maps) up to version 1.7.08. Root cause: Missing Authorization (Broken Access Control) allows access to resources without proper permission validation. Documented severity is low (CVSS ~4.3). Public references indicate the vulnerabili...

CVE-2023-47845

CVE-2023-47845 describes a CSRF vulnerability in the WordPress plugin Grab & Save (versions

CVE-2023-48280

CVE-2023-48280 affects the WordPress plugin Consensu.io (

CVE-2023-51524

CVE-2023-51524 concerns the WordPress plugin weForms. The connected data confirms a Missing Authorization vulnerability in weForms versions up to and including 1.6.18, specifically related to an unauthorized export of form entries via the export_form_entries action. The issue is categorized with ...

CVE-2023-51526

CVE-2023-51526 is a Missing Authorization vulnerability in the WordPress plugin Simple Staff List (affected: up to version 2.2.4). The connected data confirm the issue arises from missing authorization for specific admin actions, notably via ajax_flush_rewrite_rules and staff_member_export, allow...

CVE-2023-51537

CVE-2023-51537 is a Missing Authorization vulnerability in the WordPress plugin Awesome Support (vendor: Awesome Support) affecting versions from n/a up to and including 6.1.5 . Connected documents indicate this issue has been publicly discussed with remediation by applying a fix in later release...

CVE-2023-51670

No public technical details about CVE-2023-51670 are present in the provided documents. Monitor for updates from official disclosures.

CVE-2023-51671

Technical details about CVE-2023-51671 are not provided in the connected documents. The initial description notes a Missing Authorization issue affecting FunnelKit Checkout up to 3.10.3. Monitor for official patches or disclosures for concrete impact and remediation.

CVE-2023-51679

CVE-2023-51679 affects the BulkGate SMS Plugin for WooCommerce (WordPress) up to version 3.0.2. Multiple sources (NVD, RH/Red Hat, CNNVD) describe it as a Missing/Broken Authorization vulnerability stemming from lack of proper authorization validation. Reported CVSS metrics in NVD indicate CVSS 3...

CVE-2023-51680

Summary: CVE-2023-51680 affects the WordPress plugin “Quotes for WooCommerce.” The root cause is missing authorization checks leading to Broken Access Control in AJAX actions. The vulnerability exists in versions up to and including 2.0.1 and can allow manipulation of quotes by authenticated user...

CVE-2023-52177

CVE-2023-52177 affects the WordPress plugin Integrate Google Drive by SoftLab with Missing Authorization (Broken Access Control) in versions from n/a to 1.3.3. The available sources confirm affected software and root cause, but provide no public details on exploit vectors, impact beyond what’s st...

Ubuntu: Security Advisory (USN-6819-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6821-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...