231554 matches found
CVE-2023-52227
CVE-2023-52227 applies to the MailerLite – WooCommerce integration plugin for WordPress. A Missing Authorization/Broken Access Control issue exists due to missing capability checks on multiple functions, affecting versions up to and including 2.0.8. The vulnerability permits authenticated users w...
CVE-2023-52224
CVE-2023-52224 affects the WordPress plugin Revolut Gateway for WooCommerce (
CVE-2024-23503
CVE-2024-23503 (Ninja Tables
CVE-2023-51519
CVE-2023-51519 (Soliloquy Slider for WordPress) is represented in connected sources as a Missing Authorization/Broken Access Control vulnerability affecting Soliloquy Slider by Soliloquy, specifically versions up to and including 2.7.2. The connected enrichment references this as a Broken Access ...
CVE-2024-23521
CVE-2024-23521 concerns the WordPress plugin Happyforms. Affected: Happyforms versions up to and including 1.25.10. Root cause: Missing authorization checks enabling unauthenticated users to perform unauthorized actions. Public detail confirms a Broken Access Control vulnerability with low CVSS v...
CVE-2023-51682
CVE-2023-51682 : Missing Authorization vulnerability in MC4WP (Mailchimp for WordPress) affecting MC4WP
CVE-2024-24703
CVE-2024-24703 is a Broken Access Control vulnerability in MultiVendorX Marketplace (WooCommerce). The issue arises from a missing authorization check that permits unauthenticated actors to perform data-modifying actions on the WC Marketplace <= 4.0.25. PatchStack lists the vulnerable versions...
CVE-2023-51498
CVE-2023-51498 is a Missing Authorization vulnerability (Broken Access Control) in the WordPress plugin WooCommerce Canada Post Shipping , affecting versions up to 2.8.3. The connected Red Hat advisory notes the issue and confirms a patch is available (patched). No exploit details are provided in...
CVE-2023-52199
CVE-2023-52199 affects the WordPress ActivityPub plugin (
CVE-2023-52217
CVE-2023-52217 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin “WooCommerce Conversion Tracking.” Affected are versions up to 2.0.11; the issue stems from missing authorization controls in the plugin’s operations. The CVE entry notes a patch is available i...
CVE-2024-24704
CVE-2024-24704 is a Broken Access Control (Missing Authorization) vulnerability in Load More Anything for WordPress (
CVE-2023-52186
CVE-2023-52186 is a missing-authz vulnerability in the WordPress plugin “WooCommerce Product Vendors” affecting versions up to 2.2.2. The CVE’s base metrics (NVD) show CVSS 3.1, 5.3 (Medium), with network attack vector, no privileges required, no user interaction, and no confidentiality impact bu...
Ubuntu: Security Advisory (USN-6818-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2024:1963-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-48578
CVE-2022-48578 affects macOS Monterey AppleScript handling. The information provided shows an out-of-bounds read issue addressed by improved bounds checking, fixed in macOS Monterey 12.5. The AppleScript processing could lead to unexpected termination or disclosure of process memory, indicating a...
CVE-2024-22296
CVE-2024-22296 corresponds to a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin 12 Step Meeting List. Public records show affected versions are 3.14.28 and earlier, with exploitation potential via an unauthenticated or improperly authorized access to the plugin...
CVE-2024-22298
CVE-2024-22298 describes a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Amelia Booking. The affected versions are Amelia Booking ≤ 1.0.98, with unauthenticated attackers able to access restricted actions due to missing authorization checks. Patchstack notes ...
CVE-2024-21751
CVE-2024-21751 concerns the WordPress plugin RabbitLoader up to version 2.19.13, where multiple AJAX actions lack proper authorization checks, allowing authenticated users with subscriber-level access and above to modify data (e.g., purge site cache or switch caching modes) without permission. Th...