2206 matches found
CVE-2023-40603
CVE-2023-40603 affects the WordPress plugin Simple Org Chart (versions up to and including 2.3.4). The root cause is Missing Authorization (Broken Access Control) allowing unauthenticated access to tree settings. The vulnerability is currently unpatched in the sources provided (no fixed version i...
CVE-2023-41240
CVE-2023-41240 concerns the WordPress plugin Pricing Deals for WooCommerce . Affected versions are up to 2.0.3.2 and the issue is described as Missing Authorization / Broken Access Control . It allows an unauthenticated user to exploit a lack of authorization (e.g., via the vtprd_ajax_clone_rule ...
CVE-2023-48280
CVE-2023-48280 affects the WordPress plugin Consensu.io (
CVE-2023-51413
Piotnet Forms (WordPress plugin) contains a Missing Authorization vulnerability affecting versions up to 1.0.29, with references indicating exploitation via multiple AJAX actions. The Initial Description notes the issue spans Piotnet Forms: from n/a through 1.0.29. Connected documents reiterate t...
CVE-2023-51524
CVE-2023-51524 concerns the WordPress plugin weForms. The connected data confirms a Missing Authorization vulnerability in weForms versions up to and including 1.6.18, specifically related to an unauthorized export of form entries via the export_form_entries action. The issue is categorized with ...
CVE-2023-51670
No public technical details about CVE-2023-51670 are present in the provided documents. Monitor for updates from official disclosures.
CVE-2023-51671
Technical details about CVE-2023-51671 are not provided in the connected documents. The initial description notes a Missing Authorization issue affecting FunnelKit Checkout up to 3.10.3. Monitor for official patches or disclosures for concrete impact and remediation.
CVE-2023-51680
Summary: CVE-2023-51680 affects the WordPress plugin “Quotes for WooCommerce.” The root cause is missing authorization checks leading to Broken Access Control in AJAX actions. The vulnerability exists in versions up to and including 2.0.1 and can allow manipulation of quotes by authenticated user...
CVE-2023-52117
Technical details for CVE-2023-52117 are not provided in the connected documents. According to the initial description, this is a Missing Authorization vulnerability affecting ProfileGrid
CVE-2024-23518
CVE-2024-23518 concerns the WordPress plugin ACF Photo Gallery Field (navz-photo-gallery) . Affected versions are listed as
CVE-2023-48273
CVE-2023-48273 affects the WordPress plugin Preloader for Website (version
CVE-2023-52224
CVE-2023-52224 affects the WordPress plugin Revolut Gateway for WooCommerce (
CVE-2023-51682
CVE-2023-51682 : Missing Authorization vulnerability in MC4WP (Mailchimp for WordPress) affecting MC4WP
CVE-2024-24703
CVE-2024-24703 is a Broken Access Control vulnerability in MultiVendorX Marketplace (WooCommerce). The issue arises from a missing authorization check that permits unauthenticated actors to perform data-modifying actions on the WC Marketplace <= 4.0.25. PatchStack lists the vulnerable versions...
CVE-2023-51498
CVE-2023-51498 is a Missing Authorization vulnerability (Broken Access Control) in the WordPress plugin WooCommerce Canada Post Shipping , affecting versions up to 2.8.3. The connected Red Hat advisory notes the issue and confirms a patch is available (patched). No exploit details are provided in...
CVE-2023-52199
CVE-2023-52199 affects the WordPress ActivityPub plugin (
CVE-2024-24704
CVE-2024-24704 is a Broken Access Control (Missing Authorization) vulnerability in Load More Anything for WordPress (
CVE-2024-21751
CVE-2024-21751 concerns the WordPress plugin RabbitLoader up to version 2.19.13, where multiple AJAX actions lack proper authorization checks, allowing authenticated users with subscriber-level access and above to modify data (e.g., purge site cache or switch caching modes) without permission. Th...