WordPress NextGEN Gallery Plugin < 3.39 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagely:nextgengallery"; if description...

WordPress EWWW Image Optimizer Plugin < 7.2.1 Information Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ewww:imageoptimizer"; if description...

WordPress PowerPack Pro for Elementor Plugin <= 2.9.23 is vulnerable to Cross Site Scripting (XSS)

Software PowerPack Pro for Elementor Type Plugin Vulnerable versions = 2.9.23 Fixed in 2.9.24 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49739 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2b872117ab59 Credits Rafie Muhammad...

WordPress PageLayer Plugin <= 1.7.7 is vulnerable to Broken Access Control

Software PageLayer Type Plugin Vulnerable versions = 1.7.7 Fixed in 1.7.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49196 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 932dd69200f0 Credits Abdi Pranata Required privilege...

Exploit for Code Injection in Qodeinteractive Qode_Essential_Addons

CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Aut...

WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)

Software HDW Player Plugin Video Player & Video Gallery Type Plugin Vulnerable versions = 5.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-49178 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 27d63d522c9...

WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Lightbox Type Plugin Vulnerable versions = 2.4.5 Fixed in 2.4.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49174 Patch priority High CVSS severity High 5.9 Developer Claim ownership PSID 96d318dd5de5 Credits emad Required privilege Author...

WordPress Database for CF7 Plugin <= 1.2.4 is vulnerable to Broken Access Control

Software Database for CF7 Type Plugin Vulnerable versions = 1.2.4 Fixed in 1.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49167 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d94c70d6f143 Credits RE-ALTER Required...

WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Doofinder for WooCommerce Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49185 Patch priority Medium CVSS severity Medium 7.1 Developer Doofinder PSID 6796f29d2414 Credits Phd Required privilege...

WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software BrainCert – HTML5 Virtual Classroom Type Plugin Vulnerable versions = 2.0 Fixed in 2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49172 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 337638b9c86e Credits Khalid Yusuf...

WordPress Machic Core Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Machic Core Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49186 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a0c9d73f4a61 Credits RE-ALTER Required privilege...

WordPress JetTabs Plugin <= 2.1.25.1 is vulnerable to Broken Access Control

Software JetTabs Type Plugin Vulnerable versions = 2.1.25.1 Fixed in 2.1.25.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48760 Patch priority Medium CVSS severity Medium 8.2 Developer Crocoblock PSID e010512426cf Credits Rafie Muhammad Patchstack...

WordPress Customer Reviews Collector for WooCommerce Plugin <= 3.9 is vulnerable to Arbitrary File Upload

Software Customer Reviews Collector for WooCommerce Type Plugin Vulnerable versions = 3.9 Fixed in 4.0 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 9e0239dc9850 Credits Rafie Muhammad...

WordPress JetEngine Plugin <= 3.2.5.1 is vulnerable to Broken Access Control

Software JetEngine Type Plugin Vulnerable versions = 3.2.5.1 Fixed in 3.2.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID 12b2e0c6af30 Credits Rafie Muhammad Patchstack...

WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Broken Access Control

Software JetElements For Elementor Type Plugin Vulnerable versions = 2.6.13 Fixed in 2.6.13.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48760 Patch priority Medium CVSS severity Medium 8.2 Developer Crocoblock PSID e51e2e2e22ba Credits Rafie Muhammad...

WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Broken Access Control

Software JetBlocks For Elementor Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.8.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48760 Patch priority Medium CVSS severity Medium 8.2 Developer Crocoblock PSID 51b603280bfd Credits Rafie Muhammad...

WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Broken Access Control

Software JetBlocks For Elementor Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.8.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID fd2a2b07e17e Credits Rafie Muhammad...

WordPress JetPopup Plugin <= 2.0.2 is vulnerable to Broken Access Control

Software JetPopup Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.2.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID 023e24c3cead Credits Rafie Muhammad Patchstack Require...

WordPress JetTabs Plugin <= 2.1.25.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software JetTabs Type Plugin Vulnerable versions = 2.1.25.1 Fixed in 2.1.25.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48762 Patch priority Low CVSS severity Low 6.3 Developer Crocoblock PSID 6d9f8f2ea4be Credits Rafie Muhammad Patchstack...

WordPress JetTabs Plugin <= 2.1.25.1 is vulnerable to Broken Access Control

Software JetTabs Type Plugin Vulnerable versions = 2.1.25.1 Fixed in 2.1.25.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48761 Patch priority Medium CVSS severity Medium 6.3 Developer Crocoblock PSID 05f1f67c4d40 Credits Rafie Muhammad Patchstack...