WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Code Snippets Type Plugin Vulnerable versions = 3.5.0 Fixed in 3.6.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47666 Patch priority Low CVSS severity Low 4.3 Developer Code Snippets Pro PSID 3f0e2c5bc521 Credits Huynh Tien Si...

WordPress Foyer Plugin <= 1.7.5 is vulnerable to Content Injection

Software Foyer Type Plugin Vulnerable versions = 1.7.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Content Injection CVE CVE-2023-47663 Patch priority Low CVSS severity Low 4.6 Developer Claim ownership PSID 8b7640063c90 Credits Abdi Pranata Required privilege Contributor...

WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Plainview Protect Passwords Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47664 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2a5e4c3d7ce6 Credits Mika Requir...

WordPress QR Code Tag Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software QR Code Tag Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5567 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e1f923c2a1cd Credits Lana Codes Required privilege...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 14.5.00.7, which stems from a Use Implicit Intent to Handle Sensitive...

WordPress WP MapIt Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software WP MapIt Type Plugin Vulnerable versions = 2.7.1 Fixed in 3.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5658 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5bde71429963 Credits Lana Codes Required privilege...

WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

Software WP Crowdfunding Type Plugin Vulnerable versions = 2.1.6 Fixed in 2.1.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47532 Patch priority High CVSS severity High 5.8 Developer Claim ownership PSID 6353d577e913 Credits Khalid Yusuf Required privilege...

WordPress EazyDocs Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

Software EazyDocs Type Plugin Vulnerable versions = 2.3.5 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47549 Patch priority High CVSS severity High 6.8 Developer Claim ownership PSID 1e8fa9f4a641 Credits minhtuanact Required privile...

WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection

Software Integrate Google Drive Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2023-47548 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 2cbf5a570bac Credits minhtuanact Required privilege...

WordPress ImageMapper Plugin <= 1.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software ImageMapper Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-5532 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3917edf745ee Credits Lana Codes Required...

WordPress Product Enquiry for WooCommerce Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Product Enquiry for WooCommerce Type Plugin Vulnerable versions = 3.1 Fixed in 3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47512 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 91da7577d818 Credits LEE S...

WordPress Responsive Pricing Table Plugin < 5.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Pricing Table Type Plugin Vulnerable versions 5.1.8 Fixed in 5.1.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-4810 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 86c4c3415cb3 Credits Vaishnav Rajeevan Required...

WordPress Ninja Forms Plugin < 3.6.34 is vulnerable to Cross Site Scripting (XSS)

Software Ninja Forms Type Plugin Vulnerable versions 3.6.34 Fixed in 3.6.34 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5530 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a9b2d204bb4c Credits Jonathan Zamora Required...

WordPress ARI Stream Quiz Plugin <= 1.3.2 is vulnerable to Content Injection

Software ARI Stream Quiz Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A5: Broken Access Control Classification Content Injection CVE CVE-2023-47513 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 942a7b806fcf Credits Abdi Pranata Required privilege...

WordPress Social Warfare Plugin <= 4.4.3 is vulnerable to Cross Site Scripting (XSS)

Software Social Warfare Type Plugin Vulnerable versions = 4.4.3 Fixed in 4.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4842 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c0bd3193c179 Credits Lana Codes Required...

WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX Plugin < 5.0.3 is vulnerable to Broken Access Control

Software Product Catalog Enquiry for WooCommerce by MultiVendorX Type Plugin Vulnerable versions 5.0.3 Fixed in 5.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 612473ae3d0d Credits...

WordPress Add Local Avatar Plugin <= 12.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Add Local Avatar Type Plugin Vulnerable versions = 12.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47650 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f1f2e451a275 Credits LEE SE HYOUNG...

WordPress Awesome Support Plugin < 6.1.5 is vulnerable to Broken Access Control

Software Awesome Support Type Plugin Vulnerable versions 6.1.5 Fixed in 6.1.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-5352 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 07a73880431c Credits Krzysztof Zając CERT PL Required...

WordPress ImageMapper Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software ImageMapper Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5507 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dd6f49b1b90c Credits Lana Codes Required privilege...

WordPress TWB Woocommerce Reviews Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)

Software TWB Woocommerce Reviews Type Plugin Vulnerable versions = 1.7.5 Fixed in 1.7.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47653 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a756ef9307fc Credits Emili Castells...