231579 matches found
CVE-2023-46607
CVE-2023-46607 affects the WP iCal Availability WordPress plugin. Affected versions are
CVE-2023-46606
CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions
CVE-2023-46605
CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions
CVE-2023-46309
CVE-2023-46309 affects WordPress plugin wpDiscuz prior to version 7.6.11, where a Missing Authorization flaw in access control allows unauthenticated users to perform restricted actions due to broken access control. Publicly known details indicate the affected range is wpDiscuz
CVE-2023-46206
CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...
CVE-2023-46196
CVE-2023-46196 affects the WordPress plugin Social proof testimonials and reviews by Repuso (plugin slug: social-testimonials-and-reviews-widget), vulnerable in versions up to and including 4.97 due to missing authorization (Broken Access Control). The issue allows interaction with data or featur...
CVE-2023-46195
CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)
CVE-2023-46082
CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...
CVE-2023-46083
CVE-2023-46083 concerns the Kali Forms WordPress plugin (Contact Form builder with drag & drop). Affected versions are Kali Forms
CVE-2023-46080
CVE-2023-46080 : WordPress plugin ApplyOnline – Application Form Builder and Manager
CVE-2023-46079
CVE-2023-46079 affects the WordPress Ashe Extra plugin (
CVE-2023-45828
CVE-2023-45828 affects the WordPress RumbleTalk Live Group Chat plugin (versions up to and including 6.2.5). The issue is a Missing/Incorrectly Configured Authorization vulnerability (Broken Access Control) in the plugin’s handling of AJAX/authorization checks (handleRequest and related flows), a...
CVE-2023-46073
CVE-2023-46073 (DX Delete Attached Media) is a WordPress plugin vulnerability in which versions <= 2.0.5.1 expose Broken Access Control (Missing Authorization) via CSRF/bypass scenarios. The Patchstack entry confirms affected software (DX Delete Attached Media plugin), the root cause (broken a...
CVE-2023-45766
CVE-2023-45766 is a WordPress Poll Maker plugin vulnerability (≤ 4.7.1) due to missing authorization checks that could allow an unauthenticated user to access or manipulate data. Root cause: broken access control in the plugin’s poll-related functionality. A fixed version, Poll Maker 4.7.2, exist...
CVE-2023-45765
CVE-2023-45765 concerns weDevs WP ERP plugin versions
CVE-2023-45631
CVE-2023-45631 concerns the WordPress plugin “Responsive Image Gallery, Gallery Album” (wpdevart) up to version 2.0.3. Multiple connected sources confirm a Missing Authorization/Broken Access Control vulnerability allowing unauthorized actions via AJAX (no explicit exploit details provided). Affe...
CVE-2023-45110
CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version
CVE-2023-45101
CVE-2023-45101 affects CusRev Customer Reviews for WooCommerce (WordPress) up to version 5.36.0. The issue is described as Missing Authorization / Broken Access Control, arising from incorrectly configured access control security levels. Connected sources indicate a low-severity impact (CVSS 4.3,...
CVE-2023-44258
CVE-2023-44258 affects the WordPress plugin Schema App Structured Data for Schema.org (Schema App Structured Data) versions 1.23.1 and earlier. The root cause is Missing Authorization via page_init, i.e., broken access control that can permit unauthorized access to sensitive data. CVSS v3.1 base ...