CVE-2023-51537

CVE-2023-51537 is a Missing Authorization vulnerability in the WordPress plugin Awesome Support (vendor: Awesome Support) affecting versions from n/a up to and including 6.1.5 . Connected documents indicate this issue has been publicly discussed with remediation by applying a fix in later release...

CVE-2023-51670

No public technical details about CVE-2023-51670 are present in the provided documents. Monitor for updates from official disclosures.

CVE-2023-51671

Technical details about CVE-2023-51671 are not provided in the connected documents. The initial description notes a Missing Authorization issue affecting FunnelKit Checkout up to 3.10.3. Monitor for official patches or disclosures for concrete impact and remediation.

CVE-2023-51679

CVE-2023-51679 affects the BulkGate SMS Plugin for WooCommerce (WordPress) up to version 3.0.2. Multiple sources (NVD, RH/Red Hat, CNNVD) describe it as a Missing/Broken Authorization vulnerability stemming from lack of proper authorization validation. Reported CVSS metrics in NVD indicate CVSS 3...

CVE-2023-51680

Summary: CVE-2023-51680 affects the WordPress plugin “Quotes for WooCommerce.” The root cause is missing authorization checks leading to Broken Access Control in AJAX actions. The vulnerability exists in versions up to and including 2.0.1 and can allow manipulation of quotes by authenticated user...

CVE-2023-52177

CVE-2023-52177 affects the WordPress plugin Integrate Google Drive by SoftLab with Missing Authorization (Broken Access Control) in versions from n/a to 1.3.3. The available sources confirm affected software and root cause, but provide no public details on exploit vectors, impact beyond what’s st...

Ubuntu: Security Advisory (USN-6821-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6819-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-52227

CVE-2023-52227 applies to the MailerLite – WooCommerce integration plugin for WordPress. A Missing Authorization/Broken Access Control issue exists due to missing capability checks on multiple functions, affecting versions up to and including 2.0.8. The vulnerability permits authenticated users w...

CVE-2023-52224

CVE-2023-52224 affects the WordPress plugin Revolut Gateway for WooCommerce (

CVE-2024-23503

CVE-2024-23503 (Ninja Tables

CVE-2023-51519

CVE-2023-51519 (Soliloquy Slider for WordPress) is represented in connected sources as a Missing Authorization/Broken Access Control vulnerability affecting Soliloquy Slider by Soliloquy, specifically versions up to and including 2.7.2. The connected enrichment references this as a Broken Access ...

CVE-2024-23521

CVE-2024-23521 concerns the WordPress plugin Happyforms. Affected: Happyforms versions up to and including 1.25.10. Root cause: Missing authorization checks enabling unauthenticated users to perform unauthorized actions. Public detail confirms a Broken Access Control vulnerability with low CVSS v...

CVE-2023-51682

CVE-2023-51682 : Missing Authorization vulnerability in MC4WP (Mailchimp for WordPress) affecting MC4WP

CVE-2024-24703

CVE-2024-24703 is a Broken Access Control vulnerability in MultiVendorX Marketplace (WooCommerce). The issue arises from a missing authorization check that permits unauthenticated actors to perform data-modifying actions on the WC Marketplace <= 4.0.25. PatchStack lists the vulnerable versions...

CVE-2023-51498

CVE-2023-51498 is a Missing Authorization vulnerability (Broken Access Control) in the WordPress plugin WooCommerce Canada Post Shipping , affecting versions up to 2.8.3. The connected Red Hat advisory notes the issue and confirms a patch is available (patched). No exploit details are provided in...

CVE-2023-52199

CVE-2023-52199 affects the WordPress ActivityPub plugin (

CVE-2023-52217

CVE-2023-52217 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin “WooCommerce Conversion Tracking.” Affected are versions up to 2.0.11; the issue stems from missing authorization controls in the plugin’s operations. The CVE entry notes a patch is available i...

CVE-2024-24704

CVE-2024-24704 is a Broken Access Control (Missing Authorization) vulnerability in Load More Anything for WordPress (

CVE-2023-52186

CVE-2023-52186 is a missing-authz vulnerability in the WordPress plugin “WooCommerce Product Vendors” affecting versions up to 2.2.2. The CVE’s base metrics (NVD) show CVSS 3.1, 5.3 (Medium), with network attack vector, no privileges required, no user interaction, and no confidentiality impact bu...