CVE-2023-32593

The CVE-2023-32593 entry affects the WordPress GS Pins for Pinterest plugin up to version 1.6.7, where a Missing Authorization / Broken Access Control vulnerability exists due to incorrectly configured access control. Patchstack confirms that versions

CVE-2023-32586

CVE-2023-32586 concerns the WordPress SoundCloud Is Gold plugin (versions

CVE-2023-32581

CVE-2023-32581 affects WP-Chatbot for Messenger (WordPress plugin) up to version 4.7, with a Missing Authorization / Broken Access Control vulnerability. Root cause: insufficient access control checks enabling unauthorized actions via the plugin. CVSS v3.1 base score is 5.4 (Medium). Patch: fixed...

CVE-2023-32581 WordPress WP-Chatbot for Messenger plugin <= 4.7 - Broken Access Control

Missing Authorization vulnerability in larrykim WP-Chatbot for Messenger wp-chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through = 4.7...

CVE-2023-32585

CVE-2023-32585 relates to the WordPress plugin Portfolio Gallery – Responsive Image Gallery . The vulnerability is a Broken Access Control issue due to an missing authorization check that allowed unauthenticated users to exploit. Affected versions are v1.4.6 and earlier ; the issue is fixed in v1...

CVE-2023-32574

CVE-2023-32574 is a missing authorization / broken access control vulnerability in the WordPress plugin Injection Guard (versions

CVE-2023-32519

CVE-2023-32519 corresponds to a WordPress plugin issue in Webcodin WCP Contact Form (

CVE-2023-32507 WordPress Woo Custom Emails plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mehul Kaklotar Woo Custom Emails woo-custom-emails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Custom Emails: from n/a through = 2.2...

CVE-2023-32507 WordPress Woo Custom Emails plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in wp3sixty Woo Custom Emails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Custom Emails: from n/a through 2.2...

CVE-2023-32506

CVE-2023-32506 is a real, publicly documented vulnerability affecting the WordPress plugin Link Whisper Free (versions

CVE-2023-30490

CVE-2023-30490 is a Missing Authorization / Broken Access Control flaw in WordPress plugin Easing Slider (

CVE-2023-28990

CVE-2023-28990 : WordPress theme Viral Mag (versions ≤ 1.0.9) suffers a Missing Authorization flaw that enables an authenticated user withsubscriber privileges to activate plugins arbitrarily due to broken access control. The issue is classed as a Medium risk with CVSSv3.1 score 4.3 (AV:N/AC:L/PR...

CVE-2023-27456

CVE-2023-27456 is a missing-authorization vulnerability in the WordPress plugin/theme set for HashThemes Total (Total theme). It affects versions up to 2.1.19 and allows an authenticated user (subscriber) to activate arbitrary plugins due to incorrectly configured access control. The issue is cha...

CVE-2022-44578 WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pierre JEHAN Owl Carousel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Owl Carousel: from n/a through 0.5.3...

CVE-2022-44578

CVE-2022-44578 : WordPress Owl Carousel plugin (

CVE-2022-47594

CVE-2022-47594 affects the WordPress plugin Essential Blocks for Gutenberg (

CVE-2023-22697 WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Survey Maker team Survey Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through 3.2.0...

CVE-2022-47182

CVE-2022-47182 : WordPress plugin APIExperts Square for WooCommerce (affected versions:

CVE-2022-46846

CVE-2022-46846 corresponds to a Missing Authorization vulnerability in the WordPress plugin Trending/Popular Post Slider and Widget (

CVE-2022-46840 WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...