CVE-2023-37979

The CVE-2023-37979 entry maps to the Ninja Forms WordPress plugin with reflected XSS in versions

CVE-2023-35043 WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Neha Goel Recent Posts Slider plugin = 1.1 versions...

CVE-2023-35043

CVE-2023-35043 corresponds to an unauthenticated stored XSS in the WordPress plugin Neha Goel Recent Posts Slider , affected versions

CVE-2023-29430

CVE-2023-29430 affects the WordPress TheRoof theme by CTHthemes, up to version 1.0.3, via an unauthenticated reflected XSS. A fix is available in version 1.0.4 and later. Action: upgrade TheRoof theme to at least 1.0.4 to remediate the vulnerability.

CVE-2023-29427

CVE-2023-29427 – Amelia WordPress plugin : Unauthenticated Reflected Cross-Site Scripting (XSS) in the TMS Booking for Appointments and Events Calendar. Affected versions: Amelia plugin

CVE-2022-47614

CVE-2022-47614 : Unauth. SQL Injection in the InspireUI MStore API WordPress plugin, affected versions

CVE-2023-28166 WordPress Tags Cloud Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Aakif Kadiwala Tags Cloud Manager plugin = 1.0.0 versions...

CVE-2023-35097

CVE-2023-35097 affects WP Affiliate Links (Internet Marketing Dojo) plugin for WordPress, specifically versions ≤ 0.1.1. The vulnerability is unauthenticated reflected XSS in the plugin, enabling injection of malicious scripts via user-supplied input. Exploitation status is not detailed in the pr...

CVE-2023-35098

CVE-2023-35098 describes an unauthenticated reflected XSS in the WordPress NextGen GalleryView plugin (

CVE-2023-24420

CVE-2023-24420 affects the WordPress plugin Admin side data storage for Contact Form 7 (&lt;= 1.1.1). The vulnerability is unauthenticated, allows reflected XSS in the admin-side data storage feature. Root cause is an unauthenticated input handling flaw leading to cross-site scripting. Affected p...

CVE-2023-34000

CVE-2023-34000 affects WordPress WooCommerce Stripe Payment Gateway plugin versions up to 7.4.0, with a fix in 7.4.1. The vulnerability is an unauthenticated insecure direct object reference (IDOR) that allows viewing order PII (email, name, full address) due to inadequate access control in order...

CVE-2023-27613

CVE-2023-27613 affects WordPress plugin Forms Ada – Form Builder (MonitorClick Forms Ada) ≤ 1.0. It is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability caused by insufficient input sanitization, allowing injected script to be reflected in responses. Impact is limited to clie...

CVE-2023-29439

CVE-2023-29439 is a reflected XSS in the WordPress plugin FooGallery (versions

CVE-2023-27455

CVE-2023-27455 is an unauthenticated, reflected XSS in the WordPress plugin “Update Image Tag Alt Attribute” up to version 2.4.5. Public references confirm the vulnerability affects this plugin and versions ≤ 2.4.5, with a CVSS base score around 6.1 (NVD) and higher in PatchStack data. The issue ...

CVE-2023-27419

CVE-2023-27419 affects the WordPress Viable Blog theme ( 1.1.4 when available; monitor for a confirmed fixed release. If upgrading is not immediately possible, monitor vendor advisories for a confirmed patch. The vulnerability is unpatched/not publicly fixed in the supplied sources.

Security Updates for Microsoft SharePoint Server 2019 (May 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability. CVE-2023-24950 - A...

CVE-2022-47449

CVE-2022-47449 documents a cross-site scripting flaw in the RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin, vulnerable versions

CVE-2023-29172

CVE-2023-29172 affects the WordPress PropertyHive plugin (versions ≤ 1.5.46). It describes unauthenticated Reflected XSS via the merge_ids parameter. Public reports (NVD, Red Hat/Wordfence, Patchstack) confirm the vulnerability and note that a fix exists in version 1.5.47. The impact is cross-sit...

CVE-2023-25020

Summary: CVE-2023-25020 maps to a stored XSS flaw in the WordPress plugin “Arigato Autoresponder and Newsletter” by Kiboko Labs, affecting versions

UBUNTU-CVE-2023-26035

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...