CVE-2023-47681

CVE-2023-47681 is a Missing/Broken Access Control vulnerability in QuadLayers WooCommerce Checkout Manager (WordPress plugin). It affects plugins up to version 7.3.0, allowing unauthenticated actors to exploit due to insufficient authorization checks. Patch details: fixed in version 7.3.1. Public...

CVE-2023-47771

CVE-2023-47771 affects WordPress plugin Essential Grid (ThemePunch OHG). It is a Missing Authorization vulnerability (Broken Access Control) enabling authenticated users with subscriber+ privileges to access functions intended for higher-privilege users. Affected versions: up to 3.0.18; CVSS v3.1...

CVE-2023-47783

CVE-2023-47783 is a Missing Authorization (Broken Access Control) vulnerability in Thrive Theme Builder up to version 3.23.x (before 3.24.0). The issue affects Thrive Theme Builder and is caused by a missing capability check in a function, enabling authenticated users with subscriber-level access...

CVE-2023-51376

Technical details (affected components, root cause, exact impact, and remediation) are not publicly available in the provided documents. Please monitor for updates from official advisories and CVE databases for CVE-2023-51376.

CVE-2023-51495

CVE-2023-51495 relates to the WooCommerce Warranty Requests WordPress plugin. Affected product: WooCommerce Warranty Requests (plugin slug woocommerce-warranty) up to version 2.2.7. Description in sources: a Missing Authorization vulnerability (Broken Access Control) that could allow unauthentica...

CVE-2023-51497

CVE-2023-51497 corresponds to a Missing Authorization (Broken Access Control) vulnerability affecting the WordPress WooCommerce Ship to Multiple Addresses plugin up to version 3.8.9. Public sources (NVD, Red Hat, and PTSecurity enrichment) indicate an authorization flaw that could allow bypass of...

CVE-2023-51507

Technical details about CVE-2023-51507 are not provided in the supplied documents. No explicit affected versions beyond 8.1.16 or remediation steps are listed; monitor for updates.

CVE-2023-51516

CVE-2023-51516 is a Missing Authorization vulnerability (Broken Access Control) affecting the WordPress plugin “Business Directory Plugin – Easy Listing Directories for WordPress” up to version 6.3.9. The root cause, per provided documents, is a dispatch-related authorization issue. Connected sou...

CVE-2023-51523

CVE-2023-51523 is a Missing Authorization (Broken Access Control) vulnerability affecting the WordPress plugin WooCommerce Easy Duplicate Product (

CVE-2024-26126

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by an Improper Input Validation (CWE-20) vulnerability (CVE-2024-26126) that could bypass security features and affect page integrity. The issue supports network access with low privileges and requires user interaction to exp...

CVE-2024-26127

CVE-2024-26127 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The issue is an Improper Input Validation that can lead to a security feature bypass, enabling a low-privileged attacker to affect page integrity. Exploitation requires user interaction, and the base CVSS v3.1 scor...

CVE-2023-40603

CVE-2023-40603 affects the WordPress plugin Simple Org Chart (versions up to and including 2.3.4). The root cause is Missing Authorization (Broken Access Control) allowing unauthenticated access to tree settings. The vulnerability is currently unpatched in the sources provided (no fixed version i...

CVE-2023-41240

CVE-2023-41240 concerns the WordPress plugin Pricing Deals for WooCommerce . Affected versions are up to 2.0.3.2 and the issue is described as Missing Authorization / Broken Access Control . It allows an unauthenticated user to exploit a lack of authorization (e.g., via the vtprd_ajax_clone_rule ...

CVE-2023-48280

CVE-2023-48280 affects the WordPress plugin Consensu.io (

CVE-2023-51413

Piotnet Forms (WordPress plugin) contains a Missing Authorization vulnerability affecting versions up to 1.0.29, with references indicating exploitation via multiple AJAX actions. The Initial Description notes the issue spans Piotnet Forms: from n/a through 1.0.29. Connected documents reiterate t...

CVE-2023-51524

CVE-2023-51524 concerns the WordPress plugin weForms. The connected data confirms a Missing Authorization vulnerability in weForms versions up to and including 1.6.18, specifically related to an unauthorized export of form entries via the export_form_entries action. The issue is categorized with ...

CVE-2023-51670

No public technical details about CVE-2023-51670 are present in the provided documents. Monitor for updates from official disclosures.

CVE-2023-51671

Technical details about CVE-2023-51671 are not provided in the connected documents. The initial description notes a Missing Authorization issue affecting FunnelKit Checkout up to 3.10.3. Monitor for official patches or disclosures for concrete impact and remediation.

CVE-2023-51680

Summary: CVE-2023-51680 affects the WordPress plugin “Quotes for WooCommerce.” The root cause is missing authorization checks leading to Broken Access Control in AJAX actions. The vulnerability exists in versions up to and including 2.0.1 and can allow manipulation of quotes by authenticated user...

CVE-2023-52117

Technical details for CVE-2023-52117 are not provided in the connected documents. According to the initial description, this is a Missing Authorization vulnerability affecting ProfileGrid