CVE-2024-35735

CVE-2024-35735 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin for WordPress, affecting versions up to 1.2.11 (listed as affected from n/a through 1.2.11). The Red Hat vulnerability entry mirrors these details. The connected documents do not provide a ...

CVE-2024-31423

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...

CVE-2024-31423 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...

CVE-2024-31423

CVE-2024-31423 affects the WP Accessibility Helper (WAH) plugin for WordPress, with a Missing Authorization vulnerability present in versions up to and including 0.6.2.5. Evidence from multiple sources (WAH CVE entries and enrichment notes) confirms a Broken Access Control issue enabling unauthor...

CVE-2024-32804

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46...

CVE-2024-32798

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32798

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32797

Missing Authorization vulnerability in Martin Gibson WP LinkedIn Auto Publish.This issue affects WP LinkedIn Auto Publish: from n/a through 8.11...

CVE-2024-32797

CVE-2024-32797 is a Missing Authorization vulnerability in the WordPress plug‑in WP LinkedIn Auto Publish (Martin Gibson) affecting versions up to 8.11. The linked Red Hat and enrichment entries frame it as a Broken Access Control issue. Remediation: update WP LinkedIn Auto Publish to a version l...

CVE-2024-32798 WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32798 WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32798

CVE-2024-32798 is a Missing Authorization vulnerability in the WordPress plugin WP Travel Engine, affecting WP Travel Engine versions from n/a up to and including 5.8.0. The connected enrichment and Red Hat/WordPress records reference a price manipulation impact associated with this vulnerability...

CVE-2024-32804

CVE-2024-32804 is a missing authorization vulnerability in the WordPress plugin WP GoToWebinar by Martin Gibson. The issue affects WP GoToWebinar versions from n/a through 14.46. The connected Red Hat advisory and NVD entry confirm a missing authorization flaw in that plugin; no explicit exploit ...

CVE-2024-33543

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

CVE-2024-31267

Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2...

CVE-2024-33543

CVE-2024-33543 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin, affecting WordPress WP Time Slots Booking Form versions up to 1.2.06 (vendor: CodePeople). The issue enables unauthorized access due to broken access control as described in the CVE entry....

CVE-2024-31267

CVE-2024-31267 refers to a Missing Authorization vulnerability in the WordPress plugin WP Desk Flexible Checkout Fields for WooCommerce , affecting versions from unknown through 4.1.2 . The vulnerability is described as allowing unauthorized access (Missing Authorization) with a high impact acros...

CVE-2024-31294

Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1...

CVE-2024-31294 WordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1...

CVE-2024-31294

CVE-2024-31294 describes a missing authorization (broken access control) in Fahad Mahmood WP Sort Order for WordPress, affecting versions up to 1.3.1. The NVD entry lists a high severity (CVSS 3.1 base score 8.8) with Network attack vector, requiring Low privileges and no user interaction, and af...