3893 matches found
CVE-2023-41688 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5...
CVE-2023-41649 WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in hoangkhanh92 Ovic Product Bundle ovic-product-bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovic Product Bundle: from n/a through = 1.1.2...
CVE-2023-41130 WordPress Premmerce User Roles plugin <= 1.0.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through = 1.0.12...
CVE-2023-40678
CVE-2023-40678 affects the WordPress Simple URLs plugin (
CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability
Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...
CVE-2023-40670 WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability
Missing Authorization vulnerability in ReviewX ReviewX reviewx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through = 1.6.17...
CVE-2023-40670
CVE-2023-40670 affects the WordPress ReviewX plugin (
CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability
Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...
CVE-2023-40331
CVE-2023-40331 describes a Missing Authorization vulnerability in WordPress plugin Accordion Slider (bqworks) affecting version 1.9.6 and earlier. The root cause is an incorrect/absent authorization check that permits improper access to sensitive functions (Broken Access Control). The CVSSv3.1 ba...
CVE-2023-40213
CVE-2023-40213: WordPress Justified Gallery plugin up to version 1.7.3 suffers Broken Access Control (Missing Authorization) allowing access control bypass for certain notices. Publicly reported details in Patchstack and multiple security trackers confirm affected plugin is Justified Gallery
CVE-2023-40011
CVE-2023-40011 affects WordPress Cost Calculator Builder plugin (
CVE-2023-40203
CVE-2023-40203: WordPress MailChimp Forms by MailMunch
CVE-2023-40005 WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control
Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through = 3.1.5...
CVE-2023-40003 WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Project Manager: from n/a through = 2.6.7...
CVE-2023-39996 WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion and Accordion Slider: from n/a through 1.2.4...
CVE-2023-39996
CVE-2023-39996 is a Missing/Broken Authorization vulnerability in the WordPress plugin Accordion and Accordion Slider (versions ≤ 1.2.4). The issue arises from missing authorization checks in functions such as wp_aas_get_attachment_edit_form and wp_aas_save_attachment_data , allowing unauthentica...
CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through 1.1.4...
CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in dylanblokhuis Instant CSS instant-css allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through = 1.1.4...
CVE-2023-38480
CVE-2023-38480 affects Booster Elementor Addons (WordPress plugin) up to version 1.4.9. The root cause is missing authorization / broken access control enabling unauthenticated access. Public references indicate the vulnerability exists in Booster Elementor Addons