2153 matches found
CVE-2023-47836
CVE-2023-47836 affects the WP Meta and Date Remover plugin for WordPress, specifically versions
CVE-2023-47838
CVE-2023-47838 affects the WordPress plugin Conditional Fields for Contact Form 7 (cf7-conditional-fields). Root cause: Missing Authorization / Broken Access Control due to incorrectly configured access control levels, allowing exploitation by low-privilege users. Affected versions:
CVE-2023-48274
CVE-2023-48274 describes a Missing Authorization vulnerability in the WordPress plugin WCMultiShipping (Mondial Relay for WooCommerce). Affected versions are
CVE-2023-48287
CVE-2023-48287 relates to the WordPress TextMe SMS plugin, affected versions 1.9.0 and earlier, which exhibits a Broken Access Control/Missing Authorization vulnerability. The issue allows exploitation of improperly configured access controls (as described by PatchStack, with references to a brok...
CVE-2023-48324
CVE-2023-48324 relates to a Broken Access Control vulnerability in WordPress plugin Awesome Support up to version 6.1.4. The issue is described as missing authorization allowing exploitation of incorrectly configured access control security levels. Public sources in the connected data identify af...
CVE-2023-48776
CVE-2023-48776 affects the WordPress canvasio3D Light plugin (
CVE-2023-49154
CVE-2023-49154 concerns WordPress Button Generator – easily Button Builder (plugin)
CVE-2023-49167
CVE-2023-49167 affects the WordPress Database for CF7 plugin (
CVE-2023-49194
CVE-2023-49194 is a WordPress plugin vulnerability in the Importify – Dropshipping WooCommerce plugin (
CVE-2023-49754
CVE-2023-49754 concerns the WordPress plugin Bulk Edit Post Titles (
CVE-2023-49756
CVE-2023-49756 refers to WordPress Eventin plugin
CVE-2023-49758
CVE-2023-49758 concerns the WordPress plugin WP Booking System. The issue is a Missing Authorization flaw in wpbs_save_calendar_data that allowed authenticated users (subscriber level and above) to save calendar data on affected versions. Vulnerable range:
CVE-2023-49818
CVE-2023-49818 affects the WordPress plugin Webflow Pages (Webflow Pages) up to version 1.0.8. The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access. CVSS v3.1 base score is 5.3 (Medium). Red Hat and Patchs...
CVE-2023-49861
CVE-2023-49861 describes a Missing Authorization vulnerability in the WordPress plugin Social Media Feather (versions ≤ 2.1.3). The issue is attributed to broken access control / improperly configured access security levels , enabling unauthorized access to privileged functions. The CVE entry lis...
CVE-2023-49831
CVE-2023-49831 is a Missing Authorization (Broken Access Control) vulnerability in WordPress plugin RegistrationMagic (RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login) affecting versions up to 5.2.3.0. The issue, arising from incorrectly configured access...
CVE-2023-49859
CVE-2023-49859 concerns WordPress plugin Login With Ajax (
CVE-2023-49835
CVE-2023-49835 affects the WordPress plugin Post Duplicator (versions up to 2.31). The issue is described as a Missing Authorization / Broken Access Control vulnerability allowing unauthorized access due to incorrectly configured access control. The vulnerability and its CVE are corroborated by P...
CVE-2023-49858
CVE-2023-49858 refers to the WordPress Custom Login plugin. Affected versions are
CVE-2023-49850
CVE-2023-49850 – WordPress WP Simple HTML Sitemap : Affected plugin versions are ≤ 2.7. Root cause is broken access control due to missing authorization checks, allowing unauthenticated access to perform an unauthorized action. CVSS v3.1 base score is 5.3 (Medium) per Patchstack, and reports cons...
CVE-2023-49857
CVE-2023-49857 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Awesome Support . Affected versions are up to 6.1.7 ; unauthenticated users could exploit misconfigured access controls. The PatchStack entry confirms a fix in 6.1.8 . NVD/CVSS data show a 6.5 (M...