CVE-2022-44518

CVE-2022-44518 affects Adobe Acrobat Reader DC (and earlier/Classic variants) with a use-after-free vulnerability that could lead to arbitrary code execution in the current user context. The issue requires user interaction: a victim must open a malicious file. Public details list affected product...

CVE-2022-44517

Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Exploitation requires user interaction (opening a malicious file). These details are supported by...

CVE-2022-44519

CVE-2022-44519 affects Acrobat Reader DC (versions 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). Root cause: a use-after-free in a component used when opening a malicious file, leading to possible disclosure of sensitive memory and the ability to bypass ASLR. Expl...

CVE-2022-44520

CVE-2022-44520 affects Adobe Acrobat/Reader: Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. It is a use‑after‑free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

CVE-2022-44513

CVE-2022-44513 affects Adobe Acrobat Reader DC (versions including 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier). The vulnerability is an out-of-bounds write in the processing of certain files that could lead to arbitrary code execution in the context of the curren...

CVE-2022-44514

CVE-2022-44514 : Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by a use‑after‑free vulnerability that can cause arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, en...

CVE-2023-44142

CVE-2023-44142 affects the WordPress plugin Inactive Logout,

CVE-2023-44147

CVE-2023-44147 affects the WordPress Comment Blacklist Updater plugin up to version 1.1.0. The root cause is a missing/incorrect authorization in access control (Broken Access Control), exploitable by unauthenticated users to exploit misconfigurations. The CVSS 3.1 base score is 5.3 (Medium). Rem...

CVE-2023-41952

CVE-2023-41952 affects FluentForm for WordPress (

CVE-2023-41875

CVE-2023-41875 describes a Missing Authorization vulnerability in the WordPress plugin WP Directory Kit (versions

CVE-2023-41865

CVE-2023-41865 : Slider Pro (WordPress plugin) ≤ 4.8.6 has a Broken Access Control issue where missing authorization on AJAX actions could allow unauthorized access. The vulnerability’s root cause is an insufficient access check on AJAX endpoints. Impact is limited to the affected plugin version ...

CVE-2023-41848

CVE-2023-41848 affects the WordPress Carousel Slider plugin, versions

CVE-2023-41671

CVE-2023-41671 corresponds to a Missing Authorization issue in the WordPress plugin Abandoned Cart Lite for WooCommerce (woocommerce-abandoned-cart) affecting versions up to 5.16.1. PatchSTACK classifies it as Broken Access Control with CSRF implications; the CVSS base score is 5.4 (Medium). The ...

CVE-2023-41683

CVE-2023-41683 (TelSender WordPress plugin) : The vulnerability is a Missing Authorization flaw in TelSender that allows exploitation of an incorrectly configured access control security level. Affected: TelSender versions

CVE-2023-41664

CVE-2023-41664 corresponds to a Missing Authorization flaw in the WordPress plugin Easy Newsletter Signups (

CVE-2023-41649

CVE-2023-41649 affects the WordPress plugin Ovic Product Bundle (versions up to 1.1.2). The issue is a Missing Authorization / Broken Access Control vulnerability that allows unauthenticated users to exploit misconfigured access controls. Across connected records, there is no published patch vers...

CVE-2023-41133

CVE-2023-41133 is a WordPress plugin vulnerability in Secure Admin IP (versions

CVE-2023-41130

CVE-2023-41130 concerns the WordPress plugin Premmerce User Roles (Premmerce) where a missing authorization check in role-management functions leads to a Broken Access Control vulnerability. Affected versions are

CVE-2023-40334

CVE-2023-40334 affects the HUSKY – Products Filter for WooCommerce (formerly WOOF) WordPress plugin. Affected versions are

CVE-2023-39305

CVE-2023-39305 affects the WordPress plugin Yet Another Stars Rating (YASR) up to version 3.4.3, with a Missing Authorization / Broken Access Control issue occurring via the plugin’s init flow. This allows unauthenticated attackers to perform unauthorized actions (e.g., modifying data) on affecte...