CVE-2022-44520

CVE-2022-44520 affects Adobe Acrobat/Reader: Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. It is a use‑after‑free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

CVE-2022-44513

CVE-2022-44513 affects Adobe Acrobat Reader DC (versions including 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier). The vulnerability is an out-of-bounds write in the processing of certain files that could lead to arbitrary code execution in the context of the curren...

CVE-2022-44514

CVE-2022-44514 : Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by a use‑after‑free vulnerability that can cause arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, en...

CVE-2023-44142

CVE-2023-44142 affects the WordPress plugin Inactive Logout,

CVE-2023-44147

CVE-2023-44147 affects the WordPress Comment Blacklist Updater plugin up to version 1.1.0. The root cause is a missing/incorrect authorization in access control (Broken Access Control), exploitable by unauthenticated users to exploit misconfigurations. The CVSS 3.1 base score is 5.3 (Medium). Rem...

CVE-2023-41952

CVE-2023-41952 affects FluentForm for WordPress (

CVE-2023-41875

CVE-2023-41875 describes a Missing Authorization vulnerability in the WordPress plugin WP Directory Kit (versions

CVE-2023-41865

CVE-2023-41865 : Slider Pro (WordPress plugin) ≤ 4.8.6 has a Broken Access Control issue where missing authorization on AJAX actions could allow unauthorized access. The vulnerability’s root cause is an insufficient access check on AJAX endpoints. Impact is limited to the affected plugin version ...

CVE-2023-41848

CVE-2023-41848 affects the WordPress Carousel Slider plugin, versions

CVE-2023-41671

CVE-2023-41671 corresponds to a Missing Authorization issue in the WordPress plugin Abandoned Cart Lite for WooCommerce (woocommerce-abandoned-cart) affecting versions up to 5.16.1. PatchSTACK classifies it as Broken Access Control with CSRF implications; the CVSS base score is 5.4 (Medium). The ...

CVE-2023-41683

CVE-2023-41683 (TelSender WordPress plugin) : The vulnerability is a Missing Authorization flaw in TelSender that allows exploitation of an incorrectly configured access control security level. Affected: TelSender versions

CVE-2023-41664

CVE-2023-41664 corresponds to a Missing Authorization flaw in the WordPress plugin Easy Newsletter Signups (

CVE-2023-41133

CVE-2023-41133 is a WordPress plugin vulnerability in Secure Admin IP (versions

CVE-2023-41649

CVE-2023-41649 affects the WordPress plugin Ovic Product Bundle (versions up to 1.1.2). The issue is a Missing Authorization / Broken Access Control vulnerability that allows unauthenticated users to exploit misconfigured access controls. Across connected records, there is no published patch vers...

CVE-2023-41130

CVE-2023-41130 concerns the WordPress plugin Premmerce User Roles (Premmerce) where a missing authorization check in role-management functions leads to a Broken Access Control vulnerability. Affected versions are

CVE-2023-40334

CVE-2023-40334 affects the HUSKY – Products Filter for WooCommerce (formerly WOOF) WordPress plugin. Affected versions are

CVE-2023-39920

CVE-2023-39920 affects the WordPress plugin Redirection for Contact Form 7 (wpcf7-redirect) up to version 2.9.2. The vulnerability is a Missing Authorization / Broken Access Control issue that allows exploitation due to incorrectly configured access levels, with unauthenticated access typically c...

CVE-2023-39305

CVE-2023-39305 affects the WordPress plugin Yet Another Stars Rating (YASR) up to version 3.4.3, with a Missing Authorization / Broken Access Control issue occurring via the plugin’s init flow. This allows unauthenticated attackers to perform unauthorized actions (e.g., modifying data) on affecte...

CVE-2023-38514

CVE-2023-38514 concerns a Missing Authorization vulnerability in the WordPress plugin Social Share Icons & Social Share Buttons , affecting versions up to 3.5.7. Multiple connected sources describe a broken access-control/unauthorized action scenario, caused by a missing authorization check in th...

CVE-2023-38483

CVE-2023-38483 — WordPress Instant CSS : A missing authorization vulnerability (Broken Access Control) in Instant CSS, affecting versions up to 1.1.4. The issue arises from missing authorization checks, enabling exploitation via AJAX actions. Patch available in version 1.1.5. CVSS v3.1 base score...