2267 matches found
CVE-2023-47822
CVE-2023-47822 : WordPress plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar has a Missing/Broken Access Control vulnerability. Affected versions are
CVE-2023-47826
CVE-2023-47826 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the Restaurant & Cafe Addon for Elementor (WordPress) up to version 1.5.3. Unauthenticated attackers could modify data via multiple AJAX functions. Fixed in 1.5.4. Affected product/version: Restaurant &...
CVE-2023-47830
CVE-2023-47830 is a WordPress plugin vulnerability in Live Preview for Contact Form 7, affecting versions
CVE-2023-47832
CVE-2023-47832 affects the WordPress SearchIQ plugin (versions
CVE-2023-47836
CVE-2023-47836 affects the WP Meta and Date Remover plugin for WordPress, specifically versions
CVE-2023-47838
CVE-2023-47838 affects the WordPress plugin Conditional Fields for Contact Form 7 (cf7-conditional-fields). Root cause: Missing Authorization / Broken Access Control due to incorrectly configured access control levels, allowing exploitation by low-privilege users. Affected versions:
CVE-2023-48274
CVE-2023-48274 describes a Missing Authorization vulnerability in the WordPress plugin WCMultiShipping (Mondial Relay for WooCommerce). Affected versions are
CVE-2023-48287
CVE-2023-48287 relates to the WordPress TextMe SMS plugin, affected versions 1.9.0 and earlier, which exhibits a Broken Access Control/Missing Authorization vulnerability. The issue allows exploitation of improperly configured access controls (as described by PatchStack, with references to a brok...
CVE-2023-48324
CVE-2023-48324 relates to a Broken Access Control vulnerability in WordPress plugin Awesome Support up to version 6.1.4. The issue is described as missing authorization allowing exploitation of incorrectly configured access control security levels. Public sources in the connected data identify af...
CVE-2023-48776
CVE-2023-48776 affects the WordPress canvasio3D Light plugin (
CVE-2023-49154
CVE-2023-49154 concerns WordPress Button Generator – easily Button Builder (plugin)
CVE-2023-49167
CVE-2023-49167 affects the WordPress Database for CF7 plugin (
CVE-2023-49194
CVE-2023-49194 is a WordPress plugin vulnerability in the Importify – Dropshipping WooCommerce plugin (
CVE-2023-49754
CVE-2023-49754 concerns the WordPress plugin Bulk Edit Post Titles (
CVE-2023-49756
CVE-2023-49756 refers to WordPress Eventin plugin
CVE-2023-49758
CVE-2023-49758 concerns the WordPress plugin WP Booking System. The issue is a Missing Authorization flaw in wpbs_save_calendar_data that allowed authenticated users (subscriber level and above) to save calendar data on affected versions. Vulnerable range:
CVE-2023-49818
CVE-2023-49818 affects the WordPress plugin Webflow Pages (Webflow Pages) up to version 1.0.8. The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access. CVSS v3.1 base score is 5.3 (Medium). Red Hat and Patchs...
CVE-2023-49861
CVE-2023-49861 describes a Missing Authorization vulnerability in the WordPress plugin Social Media Feather (versions ≤ 2.1.3). The issue is attributed to broken access control / improperly configured access security levels , enabling unauthorized access to privileged functions. The CVE entry lis...
CVE-2023-49831
CVE-2023-49831 is a Missing Authorization (Broken Access Control) vulnerability in WordPress plugin RegistrationMagic (RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login) affecting versions up to 5.2.3.0. The issue, arising from incorrectly configured access...