3587 matches found
CVE-2023-47224
CVE-2023-47224 relates to a Missing Authorization vulnerability in the WordPress plugin WP Travel (WP Travel)
CVE-2023-47188
CVE-2023-47188 affects the WordPress plugin Simple Job Board (versions
CVE-2023-47183
CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions
CVE-2023-47187
CVE-2023-47187 affects the WordPress plugin Animated Rotating Words (css3-rotating-words). Root cause: Missing authorization/broken access control allowing exploitation under the plugin’s access levels. Affected versions:
CVE-2023-47179
CVE-2023-47179 concerns the WordPress plugin WooODT Lite (ByConsole) with versions
CVE-2023-46644
CVE-2023-46644 documents a Missing Authorization vulnerability in the WP CTA PRO WordPress CTA plugin (WordPress CTA)
CVE-2023-46639
CVE-2023-46639 affects kk Star Ratings (WordPress plugin) up to version 5.4.5. The issue is a Missing Authorization / Broken Access Control vulnerability, enabling unauthorized access due to insufficient access checks. According to Patchstack and CVE records, the vulnerability is mitigated in ver...
CVE-2023-46635
CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...
CVE-2023-46628
CVE-2023-46628 affects WP Word Count
CVE-2023-46631
CVE-2023-46631 affects the WordPress plugin Product Recommendation Quiz for eCommerce (versions
CVE-2023-46616
CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)
CVE-2023-46612
CVE-2023-46612 describes a Missing Authorization vulnerability in the Mediabay Mediabay-lite WordPress plugin. The issue is a broken/insufficient access control that could allow unauthorized actions within Mediabay’s file management/features. Technical details in connected sources confirm affecte...
CVE-2023-46611
CVE-2023-46611 concerns the WordPress YOP Poll plugin (
CVE-2023-46610
CVE-2023-46610 relates to WordPress plugin Quill Forms (
CVE-2023-46605
CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions
CVE-2023-46309
CVE-2023-46309 affects WordPress plugin wpDiscuz prior to version 7.6.11, where a Missing Authorization flaw in access control allows unauthenticated users to perform restricted actions due to broken access control. Publicly known details indicate the affected range is wpDiscuz
CVE-2023-46206
CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...
CVE-2023-46203
CVE-2023-46203 concerns WordPress plugin Just Custom Fields (v
CVE-2023-46196
CVE-2023-46196 affects the WordPress plugin Social proof testimonials and reviews by Repuso (plugin slug: social-testimonials-and-reviews-widget), vulnerable in versions up to and including 4.97 due to missing authorization (Broken Access Control). The issue allows interaction with data or featur...