WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)

Software WP SMS Type Plugin Vulnerable versions = 6.1.4 Fixed in 6.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32742 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID aa3cfae9ba33 Credits Le Ngoc Anh Required...

WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)

Software Essential Addons for Elementor Pro Type Plugin Vulnerable versions = 5.4.8 Fixed in 5.4.9 OWASP Top 10 A5: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2023-32245 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 6f79f41d4291 Credits...

WordPress reCAPTCHA for all Plugin <= 1.22 is vulnerable to Broken Access Control

Software reCAPTCHA for all Type Plugin Vulnerable versions = 1.22 Fixed in 1.23 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32599 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 97d938ca1868 Credits Jonas Höbenreich Required...

WordPress video carousel slider with lightbox Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)

Software video carousel slider with lightbox Type Plugin Vulnerable versions = 1.0.22 Fixed in 1.0.23 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32797 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 914412fc8def...

WordPress CALL ME NOW Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software CALL ME NOW Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32602 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1bc99e4903f0 Credits Yuki Haruma Required...

PT-2023-22432

Name of the Vulnerable Software and Affected Versions Webroot SecureAnywhere Endpoint Protection CE versions 9.0.33.39 and earlier Description An issue in Webroot SecureAnywhere Endpoint Protection CE allows a local attacker to access sensitive information via the EXE installer. Recommendations F...

PT-2023-22353 · Extplorer · Extplorer

Name of the Vulnerable Software and Affected Versions: eXtplorer version 2.1.15 Description: The issue allows for insecure permissions, specifically through the file upload feature in the file manager. This vulnerability enables the upload of zip files that contain PHP pages, which can lead to...

WordPress weebotLite Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software weebotLite Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32596 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ab865941cc20 Credits Lokesh Dachepalli Required...

WordPress Booking Ultra Pro Plugin <= 1.1.12 is vulnerable to Broken Access Control

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.12 Fixed in 1.1.13 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32601 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 63ee5e2f399e Credits Badromance 1337 Required...

WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Sunny Search Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32592 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9f1ba4a22779 Credits Lokesh Dachepalli Requir...

WordPress Don8 Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)

Software Don8 Type Plugin Vulnerable versions = 0.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32582 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d202b800d3e6 Credits Yash Kanchhal Required privilege...

WordPress eBecas Plugin <= 3.1.3 is vulnerable to Cross Site Scripting (XSS)

Software eBecas Type Plugin Vulnerable versions = 3.1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32584 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a40684e094e5 Credits Pavak Tiwari Required privilege...

WordPress Portfolio Gallery – Responsive Image Gallery Plugin <= 1.4.6 is vulnerable to Broken Access Control

Software Portfolio Gallery – Responsive Image Gallery Type Plugin Vulnerable versions = 1.4.6 Fixed in 1.4.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32585 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 46edb5a7cfb0 Credit...

WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Owl Carousel Type Plugin Vulnerable versions = 0.5.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23829 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d6ec028d5249 Credits István Márton Required...

WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Reactions Lite Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32587 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b436a9de7ad3 Credits István Márton...

WordPress WP Fastest Cache Plugin < 1.1.5 is vulnerable to Server Side Request Forgery (SSRF)

Software WP Fastest Cache Type Plugin Vulnerable versions 1.1.5 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-1938 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b892370bc54e Credits Erwan LR WPScan Required privile...

WordPress Dyslexiefont Free Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Dyslexiefont Free Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32589 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fb7c8442b1dc Credits Yash Kanchhal...

WordPress AnyWhere Elementor Plugin < 1.2.8 is vulnerable to Sensitive Data Exposure

Software AnyWhere Elementor Type Plugin Vulnerable versions 1.2.8 Fixed in 1.2.8 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-0443 Patch priority Low CVSS severity Low 5 Developer WPVibes PSID 5959639f04b8 Credits Sanjay Das Required privilege...

WordPress Newsletter Popup Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Newsletter Popup Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-0766 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5cf141768871 Credits Lana Codes Required...

WordPress LetterPress Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software LetterPress Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27415 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 71ef1d80815f Credits Pavak Tiwari Required privile...