CVE-2023-47557

CVE-2023-47557 refers to a Missing Authorization vulnerability in the WordPress plugin Visitors Traffic Real Time Statistics (versions

CVE-2023-47515

CVE-2023-47515 concerns the WordPress plugin “Seers – GDPR & CCPA Cookie Consent & Compliance”. Connected sources confirm a Missing Authorization/Broken Access Control issue affecting Seers versions up to 8.1.1, allowing unauthenticated access to configured security levels. The root cause is insu...

CVE-2023-47241

CVE-2023-47241 relates to a Missing Authorization / Broken Access Control vulnerability in the CoCart – Headless ecommerce plugin (WordPress) up to version 3.11.2. Public sources (Patchstack, RH, NVD) confirm unauthenticated access level with an attacker able to exploit improper access control. T...

CVE-2023-47224

CVE-2023-47224 relates to a Missing Authorization vulnerability in the WordPress plugin WP Travel (WP Travel)

CVE-2023-47188

CVE-2023-47188 affects the WordPress plugin Simple Job Board (versions

CVE-2023-47187

CVE-2023-47187 affects the WordPress plugin Animated Rotating Words (css3-rotating-words). Root cause: Missing authorization/broken access control allowing exploitation under the plugin’s access levels. Affected versions:

CVE-2023-47183

CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions

CVE-2023-47179

CVE-2023-47179 concerns the WordPress plugin WooODT Lite (ByConsole) with versions

CVE-2023-46644

CVE-2023-46644 documents a Missing Authorization vulnerability in the WP CTA PRO WordPress CTA plugin (WordPress CTA)

CVE-2023-46639

CVE-2023-46639 affects kk Star Ratings (WordPress plugin) up to version 5.4.5. The issue is a Missing Authorization / Broken Access Control vulnerability, enabling unauthorized access due to insufficient access checks. According to Patchstack and CVE records, the vulnerability is mitigated in ver...

CVE-2023-46635

CVE-2023-46635 is a Broken Access Control vulnerability in the WordPress plugin YITH WooCommerce Product Add-Ons up to version 4.2.0 . The issue allows exploitation of an incorrectly configured access control/security levels, with unauthenticated attackers potentially accessing restricted functio...

CVE-2023-46628

CVE-2023-46628 affects WP Word Count

CVE-2023-46631

CVE-2023-46631 affects the WordPress plugin Product Recommendation Quiz for eCommerce (versions

CVE-2023-46616

CVE-2023-46616 affects NSquared Draw Attention (WordPress plugin)

CVE-2023-46611

CVE-2023-46611 concerns the WordPress YOP Poll plugin (

CVE-2023-46612

CVE-2023-46612 describes a Missing Authorization vulnerability in the Mediabay Mediabay-lite WordPress plugin. The issue is a broken/insufficient access control that could allow unauthorized actions within Mediabay’s file management/features. Technical details in connected sources confirm affecte...

CVE-2023-46610

CVE-2023-46610 relates to WordPress plugin Quill Forms (

CVE-2023-46605

CVE-2023-46605 – WordPress Convertful plugin : The WordPress plugin “Convertful – Your Ultimate On-Site Conversion Tool” versions

CVE-2023-46309

CVE-2023-46309 affects WordPress plugin wpDiscuz prior to version 7.6.11, where a Missing Authorization flaw in access control allows unauthenticated users to perform restricted actions due to broken access control. Publicly known details indicate the affected range is wpDiscuz

CVE-2023-46206

CVE-2023-46206 pertains to the WordPress MW WP Form plugin (affected versions = 5.0.0, to mitigate. Patch details also note the vulnerability’s low overall severity (CVSS 5.3) and unauthenticated prereq for exploitation. No exploitation status or in-wild indicators are provided in the supplied do...