CVE-2023-47836

CVE-2023-47836 affects the WP Meta and Date Remover plugin for WordPress, specifically versions

CVE-2023-47832

CVE-2023-47832 affects the WordPress SearchIQ plugin (versions

CVE-2023-47847

The CVE CVE-2023-47847 refers to a Missing Authorization vulnerability in the PayTR Taksit Tablosu WordPress plugin (WooCommerce integration). The vulnerability arises from incorrectly configured access control levels, i.e., a Broken Access Control issue that allows exploiting insufficient author...

CVE-2023-47869

The CVE-2023-47869 issue concerns the WordPress plugin wpForo Forum, affected up to version 2.2.5. Connected data indicates a Content Injection/Broken Access Control vulnerability arising from improper handling of script-related HTML in web pages, enabling code injection. Patchstack specifies tha...

CVE-2023-48774

CVE-2023-48774 affects the WordPress IdeaPush plugin (versions

CVE-2023-48776

CVE-2023-48776 affects the WordPress canvasio3D Light plugin (

CVE-2023-48779

CVE-2023-48779 pertains to WordPress 360 Javascript Viewer (plugin) with Broken Access Control via Missing Authorization. Affected versions are

CVE-2023-49158

CVE-2023-49158 affects the WordPress plugin LadiApp (LadiPage) and permits Stored XSS due to improper input neutralization during web page generation. Affected: LadiApp versions up to 4.4. Root cause: inadequate sanitization of input when generating pages. Impact: stored cross-site scripting coul...

CVE-2023-49167

CVE-2023-49167 affects the WordPress Database for CF7 plugin (

CVE-2023-49193

CVE-2023-49193 is a verifiable vulnerability in the WordPress plugin Social Pug (Hubbub Lite) : versions up to and including 1.30.0 allow a Missing Authorization / Broken Access Control condition. Unauthenticated users could exploit incorrectly configured access controls. The issue is publicly do...

CVE-2023-49756

CVE-2023-49756 refers to WordPress Eventin plugin

CVE-2023-49755

CVE-2023-49755 affects WordPress plugin Elementor Timeline Widget (

CVE-2023-49757

CVE-2023-49757 concerns WordPress Awesome Support plugin in versions up to 6.1.10, with a Missing Authorization vulnerability due to incorrectly configured access control. Public disclosures and patch data indicate the issue is being addressed, with a fix released in version 6.1.11. Recommended r...

CVE-2023-49758

CVE-2023-49758 concerns the WordPress plugin WP Booking System. The issue is a Missing Authorization flaw in wpbs_save_calendar_data that allowed authenticated users (subscriber level and above) to save calendar data on affected versions. Vulnerable range:

CVE-2023-49835

CVE-2023-49835 affects the WordPress plugin Post Duplicator (versions up to 2.31). The issue is described as a Missing Authorization / Broken Access Control vulnerability allowing unauthorized access due to incorrectly configured access control. The vulnerability and its CVE are corroborated by P...

CVE-2023-49857

CVE-2023-49857 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Awesome Support . Affected versions are up to 6.1.7 ; unauthenticated users could exploit misconfigured access controls. The PatchStack entry confirms a fix in 6.1.8 . NVD/CVSS data show a 6.5 (M...

CVE-2023-50877

CVE-2023-50877 — Missing Authorization in the WordPress plugin Product Filter by WBW (WBW) affecting versions up to 2.5.0 . Root cause: Broken Access Control / Missing Authorization . Public references confirm the issue exists across multiple feeds (NVD, Red Hat, CIRCL) with a base CVSS 3.1/3.1 v...

CVE-2023-51355

CVE-2023-51355 is a Missing Authorization vulnerability in MultiVendorX WC Marketplace (MVX) for WordPress/WooCommerce. Affected versions are MVX up to 4.0.23, with the root cause described as incorrectly configured access control security levels that allow bypassing authorization checks. Public ...

CVE-2018-9386

CVE-2018-9386 concerns the HTC reboot_block driver. The reboot_block_command may trigger a stack buffer overflow due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction required. Connected sources (NVD, Red Hat, CVE lists) confirm the issue descriptio...

CVE-2018-9463

The vulnerability CVE-2018-9463 affects the touchscreen path in the Android kernel: In sw49408_irq_runtime_engine_debug (touch_sw49408.c), there is an out-of-bounds write caused by an incorrect bounds check. This can enable local privilege escalation with System execution privileges required and ...