CVE-2023-47793

CVE-2023-47793 affects the WordPress plugin Acme Fix Images . The vulnerability arises from missing authorization in the acme_fix_images_ajax_callback, enabling an authenticated user with at least subscriber-level access to resize images due to broken access control. Affected versions are

CVE-2023-47822

CVE-2023-47822 : WordPress plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar has a Missing/Broken Access Control vulnerability. Affected versions are

CVE-2023-47823

CVE-2023-47823 is a WordPress FormCraft vulnerability described as a Missing Authorization/broken access control issue in FormCraft

CVE-2023-47826

CVE-2023-47826 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the Restaurant & Cafe Addon for Elementor (WordPress) up to version 1.5.3. Unauthenticated attackers could modify data via multiple AJAX functions. Fixed in 1.5.4. Affected product/version: Restaurant &...

CVE-2023-47830

CVE-2023-47830 is a WordPress plugin vulnerability in Live Preview for Contact Form 7, affecting versions

CVE-2023-47836

CVE-2023-47836 affects the WP Meta and Date Remover plugin for WordPress, specifically versions

CVE-2023-47832

CVE-2023-47832 affects the WordPress SearchIQ plugin (versions

CVE-2023-47838

CVE-2023-47838 affects the WordPress plugin Conditional Fields for Contact Form 7 (cf7-conditional-fields). Root cause: Missing Authorization / Broken Access Control due to incorrectly configured access control levels, allowing exploitation by low-privilege users. Affected versions:

CVE-2023-47841

CVE-2023-47841 affects the WordPress plugin Analytify (

CVE-2023-47847

The CVE CVE-2023-47847 refers to a Missing Authorization vulnerability in the PayTR Taksit Tablosu WordPress plugin (WooCommerce integration). The vulnerability arises from incorrectly configured access control levels, i.e., a Broken Access Control issue that allows exploiting insufficient author...

CVE-2023-48286

CVE-2023-48286 concerns the WordPress Stripe Payments plugin (Accept Stripe Payments) ≤ 2.0.79, with a Missing Authorization/ Broken Access Control vulnerability due to incorrectly configured access controls. Public-facing unauthenticated users could potentially exploit the issue due to unauthent...

CVE-2023-48774

CVE-2023-48774 affects the WordPress IdeaPush plugin (versions

CVE-2023-48779

CVE-2023-48779 pertains to WordPress 360 Javascript Viewer (plugin) with Broken Access Control via Missing Authorization. Affected versions are

CVE-2023-49154

CVE-2023-49154 concerns WordPress Button Generator – easily Button Builder (plugin)

CVE-2023-49167

CVE-2023-49167 affects the WordPress Database for CF7 plugin (

CVE-2023-49192

CVE-2023-49192 concerns the WordPress plugin Enhanced Text Widget (Clever Widgets)

CVE-2023-49193

CVE-2023-49193 is a verifiable vulnerability in the WordPress plugin Social Pug (Hubbub Lite) : versions up to and including 1.30.0 allow a Missing Authorization / Broken Access Control condition. Unauthenticated users could exploit incorrectly configured access controls. The issue is publicly do...

CVE-2023-49194

CVE-2023-49194 is a WordPress plugin vulnerability in the Importify – Dropshipping WooCommerce plugin (

CVE-2023-49756

CVE-2023-49756 refers to WordPress Eventin plugin

CVE-2023-49757

CVE-2023-49757 concerns WordPress Awesome Support plugin in versions up to 6.1.10, with a Missing Authorization vulnerability due to incorrectly configured access control. Public disclosures and patch data indicate the issue is being addressed, with a fix released in version 6.1.11. Recommended r...