3179 matches found
CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through 1.1.4...
CVE-2023-38480
CVE-2023-38480 affects Booster Elementor Addons (WordPress plugin) up to version 1.4.9. The root cause is missing authorization / broken access control enabling unauthenticated access. Public references indicate the vulnerability exists in Booster Elementor Addons
CVE-2023-38479
CVE-2023-38479 affects WordPress Simple Googlebot Visit plugin (
CVE-2023-38385 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
Missing Authorization vulnerability in Artbees JupiterX Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...
CVE-2023-38475
CVE-2023-38475 concerns the WordPress plugin Donations Made Easy – Smart Donations (
CVE-2023-38475 WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in EDGARROJAS Donations Made Easy – Smart Donations smart-donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through = 4.0.12...
CVE-2023-38383 WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Language: from n/a through 1.2.1...
CVE-2023-37989 WordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Easyship Easyship WooCommerce Shipping Rates easyship-woocommerce-shipping-rates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easyship WooCommerce Shipping Rates: from n/a through = 0.9.0...
CVE-2023-37989
CVE-2023-37989 represents a Missing Authorization vulnerability in the Easyship WooCommerce Shipping Rates plugin for WordPress. Affected: Easyship WooCommerce Shipping Rates versions
CVE-2023-38383 WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Language: from n/a through 1.2.1...
CVE-2023-37987
CVE-2023-37987 refers to a Missing Authorization / Broken Access Control vulnerability in the miniOrange YourMembership Single Sign On (YourMembership SSO) plugin. Affected: WordPress YourMembership SSO, versions up to 1.1.3 (listed as n/a through 1.1.3). Impact: improper access control could all...
CVE-2023-37984 WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 8.1.10...
CVE-2023-37971
CVE-2023-37971 is a broken access control vulnerability in the WordPress plugin WooCommerce Product Stock Alert (versions
CVE-2023-37984
CVE-2023-37984 is a Missing Authorization vulnerability affecting the WordPress plugin Quiz And Survey Master (aka Quiz Master Next) up to version 8.1.10. The root cause is broken access control due to an incorrectly configured access control security level, enabling unauthorized actions when pro...
CVE-2023-37969 WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout with Zelle on Woocommerce: from n/a through 3.1...
CVE-2023-37967 WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability
Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through = 3.6.2...
CVE-2023-37969 WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce wc-zelle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout with Zelle on Woocommerce: from n/a through = 3.1...
CVE-2023-37887
CVE-2023-37887 describes a Missing Authorization vulnerability in WordPress plugin WPSchoolPress (versions up to 2.2.7). The underlying issue is an incorrectly configured access control that can allow an unauthorized user to access certain data or functions, constituting a Broken Access Control f...