CVE-2023-46206

CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...

CVE-2023-46203

CVE-2023-46203 concerns WordPress plugin Just Custom Fields (v

CVE-2023-46195

CVE-2023-46195 – WordPress Headline Analyzer (CoSchedule)

CVE-2023-46188

CVE-2023-46188 refers to a Missing/ Broken Authorization vulnerability in the WordPress plugin Freesoul Deactivate Plugins – Plugin manager and cleanup. Affected are versions

CVE-2023-46083

CVE-2023-46083 concerns the Kali Forms WordPress plugin (Contact Form builder with drag & drop). Affected versions are Kali Forms

CVE-2023-46082

CVE-2023-46082 affects the WordPress plugin Broken Link Checker | Finder (Broken Link Checker plugin) up to version 2.4.2. The vulnerability is a Missing Authorization/Broken Access Control issue that allows unauthenticated access to moblc_auth_save_settings, enabling unauthorized actions. Patchs...

CVE-2023-46079

CVE-2023-46079 affects the WordPress Ashe Extra plugin (

CVE-2023-45828

CVE-2023-45828 affects the WordPress RumbleTalk Live Group Chat plugin (versions up to and including 6.2.5). The issue is a Missing/Incorrectly Configured Authorization vulnerability (Broken Access Control) in the plugin’s handling of AJAX/authorization checks (handleRequest and related flows), a...

CVE-2023-46073

CVE-2023-46073 (DX Delete Attached Media) is a WordPress plugin vulnerability in which versions <= 2.0.5.1 expose Broken Access Control (Missing Authorization) via CSRF/bypass scenarios. The Patchstack entry confirms affected software (DX Delete Attached Media plugin), the root cause (broken a...

CVE-2023-45766

CVE-2023-45766 is a WordPress Poll Maker plugin vulnerability (≤ 4.7.1) due to missing authorization checks that could allow an unauthenticated user to access or manipulate data. Root cause: broken access control in the plugin’s poll-related functionality. A fixed version, Poll Maker 4.7.2, exist...

CVE-2023-45760

CVE-2023-45760: wpDiscuz

CVE-2023-45636

CVE-2023-45636 concerns the WordPress plugin WordPress Backup & Migration (wp-migration-duplicator)

CVE-2023-45110

CVE-2023-45110 concerns Bold Timeline Lite (WordPress plugin) with a Missing Authorization/Broken Access Control vulnerability present up to version

CVE-2023-45101

CVE-2023-45101 affects CusRev Customer Reviews for WooCommerce (WordPress) up to version 5.36.0. The issue is described as Missing Authorization / Broken Access Control, arising from incorrectly configured access control security levels. Connected sources indicate a low-severity impact (CVSS 4.3,...

CVE-2023-45104

CVE-2023-45104 describes a Missing Authorization vulnerability in the WPDeveloper BetterLinks plugin, affecting versions

CVE-2023-45002

CVE-2023-45002 concerns the WordPress plugin WP User Frontend (weDevs) with Missing Authorization via AJAX actions up to version 3.6.8. The issue originates from Inadequate access control (Broken Access Control) that can be exploited by users with low privileges to bypass configured security leve...

CVE-2023-48775

CVE-2023-48775 affects the WordPress WP Cleanfix plugin, specifically versions through 5.6.2. The root cause is a Missing Authorization / Broken Access Control vulnerability in the plugin’s access checks, enabling exploitation due to incorrectly configured security levels. The CVSSv3.1 base score...

CVE-2023-52718

CVE-2023-52718 refers to a connection hijacking vulnerability affecting some Huawei home routers (e.g., WS8700 and other models). The issue is linked to insufficient input validation in Huawei’s firmware, enabling an attacker with adjacent access to cause Denial of Service or information leakage....

CVE-2023-7263

CVE-2023-7263 describes a path traversal vulnerability in Huawei HarmonyOS AILife-related components, notably Huawei home music system products and the HarmonyOS AILife Audio Service platform. The underlying issue allows an attacker to delete files or modify file permissions via crafted requests....

CVE-2023-7266

Huawei CVE-2023-7266 concerns a connection hijacking vulnerability affecting some Huawei home routers. Connected docs identify affected products as Huawei TC7001-10, WS7200-10, and WS7206-10 (and related models in Huawei materials). The root cause is described as a session handling flaw that enab...