CVE-2023-48739

CVE-2023-48739 affects the Porto Theme - Functionality WordPress plugin (pre-2.12.1). The issue is a Missing/Broken Access Control vulnerability allowing unauthenticated access due to incorrectly configured authorization. The CVSSv3.1 base score is 5.3 (Medium) with Low availability impact per Pa...

CVE-2023-47692

CVE-2023-47692 is a WordPress Flo Forms plugin vulnerability (affected versions

CVE-2023-47689

CVE-2023-47689 corresponds to a Missing Authorization (Broken Access Control) issue in the WordPress Animator plugin (versions <= 3.0.10) where unauthenticated users can change plugin settings. The vulnerability is documented with CVSS 3.1/6.5 (Medium) and is explicitly mitigated by a fix in v...

CVE-2023-47557

CVE-2023-47557 refers to a Missing Authorization vulnerability in the WordPress plugin Visitors Traffic Real Time Statistics (versions

CVE-2023-47523

CVE-2023-47523 is a Missing Authorization vulnerability in the WordPress plugin Auto Tag Creator (

CVE-2023-47225

CVE-2023-47225 affects the WordPress Short URL plugin (shorten-url) version 1.6.8 and earlier. The issue is a Missing Authorization/broken access control allowing exploitation via multiple AJAX functions, as documented in Patchstack and CVE records. Public details consistently state affected vers...

CVE-2023-47188

CVE-2023-47188 affects the WordPress plugin Simple Job Board (versions

CVE-2023-47183

CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions

CVE-2023-47180

CVE-2023-47180 affects the WordPress plugin Finale Lite (XLPlugins Finale Lite) with Missing Authorization, allowing unauthenticated users to delete content due to incorrectly configured access control. Public sources in the Connected Documents confirm the vulnerable range as Finale Lite versions...

CVE-2023-47179

CVE-2023-47179 concerns the WordPress plugin WooODT Lite (ByConsole) with versions

CVE-2023-46635

CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...

CVE-2023-46632

CVE-2023-46632 : WordPress plugin My Shortcodes

CVE-2023-46633

CVE-2023-46633: WordPress WP Glossary plugin

CVE-2023-46616

CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)

CVE-2023-46611

CVE-2023-46611 concerns the WordPress YOP Poll plugin (

CVE-2023-46610

CVE-2023-46610 relates to WordPress plugin Quill Forms (

CVE-2023-46609

CVE-2023-46609 concerns the WordPress FeedFocal plugin (<= 1.2.2), where Missing Authorization/Broken Access Control allows unauthenticated attackers to exploit access-control misconfigurations. Public records indicate affected versions are

CVE-2023-46606

CVE-2023-46606 pertains to the WordPress AtomChat plugin (AtomChat) with versions

CVE-2023-46605

CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions

CVE-2023-46206

CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...