Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 5:40 a.m.•16 views

CVE-2023-0993

The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, and including, 17.0.17. This allows authenticated attackers to add arbitrary audit log entries indicating that a theme or plugin has been edited, and is also a...

7.2CVSS7.2AI score0.93046EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2023/06/09 6:15 a.m.•11 views

CVE-2023-0993

The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, and including, 17.0.17. This allows authenticated attackers to add arbitrary audit log entries indicating that a theme or plugin has been edited, and is also a...

7.2CVSS6.6AI score0.93046EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2023/06/09 6:15 a.m.•17 views

CVE-2023-0993

The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, and including, 17.0.17. This allows authenticated attackers to add arbitrary audit log entries indicating that a theme or plugin has been edited, and is also a...

4.3CVSS5.8AI score0.0055EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/09 12:00 a.m.•3 views

CVE-2023-0993: Missing Authorization

The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, and including, 17.0.17. This allows authenticated attackers to add arbitrary audit log entries indicating that a theme or plugin has been edited, and is also a...

4.3CVSS6.3AI score0.0055EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/06/09 12:00 a.m.•5 views

PT-2023-16672

Name of the Vulnerable Software and Affected Versions Shield Security plugin for WordPress versions up to, and including, 17.0.17 Description The issue concerns missing authorization on the 'theme-plugin-file' AJAX action. This allows authenticated attackers to add arbitrary audit log entries,...

4.3CVSS0.0055EPSS
SaveExploits2References7
Rows per page
Query Builder