Lucene search
+L
PatchstackMost viewed

47810 matches found

Patchstack
Patchstack
added 2023/09/06 12:0 a.m.20 views

WordPress Laposta Signup Basic Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Laposta Signup Basic Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41950 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 0e4907670209 Credits Nguyen Xuan...

8.8CVSS7AI score0.00208EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/09/05 12:0 a.m.20 views

WordPress WP Accessibility Helper (WAH) Plugin <= 0.6.2.4 is vulnerable to Broken Access Control

Software WP Accessibility Helper WAH Type Plugin Vulnerable versions = 0.6.2.4 Fixed in 0.6.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41869 Patch priority Low CVSS severity Low 4.3 Developer Alexander Volkov PSID e746c281667d Credits thiennv...

6.9AI score0.00408EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/09/04 12:0 a.m.20 views

WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Goods Catalog Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41687 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f4c4ed84d022 Credits Abdi Pranata Required...

6.5CVSS5.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/09/04 12:0 a.m.20 views

WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection

Software Woocommerce Support System Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-41685 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID c2b73ca8019a Credits Mika Required privilege Administrator...

9.8CVSS6.8AI score0.00547EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/09/01 12:0 a.m.20 views

WordPress WP Bannerize Pro Plugin <= 1.6.9 is vulnerable to Cross Site Scripting (XSS)

Software WP Bannerize Pro Type Plugin Vulnerable versions = 1.6.9 Fixed in 1.7.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41663 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 77839e376c07 Credits thiennv Required...

7.1CVSS5.6AI score0.00331EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/08/30 12:0 a.m.20 views

WordPress All-in-One WP Migration OneDrive Extension Plugin <= 1.66 is vulnerable to Broken Access Control

Software All-in-One WP Migration OneDrive Extension Type Plugin Vulnerable versions = 1.66 Fixed in 1.67 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40004 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 11686f7de85d Credits...

7.3CVSS7AI score0.09666EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2023/08/28 12:0 a.m.20 views

WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Easy Coming Soon Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25483 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d32749ab7ef6 Credits Rio Darmawan Required...

5.9CVSS5.7AI score0.00316EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/08/25 12:0 a.m.20 views

WordPress Herd Effects Plugin < 5.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Herd Effects Type Plugin Vulnerable versions 5.2.4 Fixed in 5.2.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4318 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3c6da81b7acf Credits Erwan LR WPScan Required...

4.3CVSS6.6AI score0.00218EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2023/08/25 12:0 a.m.20 views

WordPress iThemes Sync Plugin <= 2.1.13 is vulnerable to Broken Access Control

Software iThemes Sync Type Plugin Vulnerable versions = 2.1.13 Fixed in 2.1.14 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40001 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID dfebd44ecd2d Credits Abdi Pranata Required privileg...

6.6AI score0.00383EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/08/17 12:0 a.m.20 views

WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Software GD Security Headers Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40330 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9ad20cf86290 Credits minhtuanact...

7.1CVSS5.6AI score0.0033EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/08/17 12:0 a.m.20 views

WordPress Mortgage Calculator Estatik Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Mortgage Calculator Estatik Type Plugin Vulnerable versions = 2.0.11 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40601 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID bf1d1cc462db Credits thiennv...

7.1CVSS5.8AI score0.0033EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/08/16 12:0 a.m.20 views

WordPress CT Commerce Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software CT Commerce Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40007 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 03b22abe2aaa Credits Nithissh S Required privilege...

5.9CVSS6AI score0.00316EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/08/16 12:0 a.m.20 views

WordPress WP-PostRatings Plugin <= 1.91 is vulnerable to Bypass Vulnerability

Software WP-PostRatings Type Plugin Vulnerable versions = 1.91 Fixed in 1.91.1 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-40332 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4e97e26b5471 Credits Mika Required privilege...

9.8CVSS6.6AI score0.00365EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/08/16 12:0 a.m.20 views

WordPress Tabs & Accordion Plugin <= 1.3.10 is vulnerable to Content Injection

Software Tabs & Accordion Type Plugin Vulnerable versions = 1.3.10 Fixed in N/A OWASP Top 10 A1: Injection Classification Content Injection CVE CVE-2023-40557 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 2f516072a35d Credits Abdi Pranata Required privilege Contributor...

5.4CVSS6.9AI score0.00357EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/08/11 12:0 a.m.20 views

WordPress ARMember Premium Plugin <= 5.9.2 is vulnerable to Broken Access Control

Software ARMember Premium Type Plugin Vulnerable versions = 5.9.2 Fixed in 5.9.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-39994 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 64d1d4b6a4ff Credits Cat Required privilege...

6.3AI score0.00282EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/08/10 12:0 a.m.20 views

WordPress Easy!Appointments Plugin <= 1.3.3 is vulnerable to Arbitrary File Deletion

Software Easy!Appointments Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.4.0 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-32295 Patch priority High CVSS severity High 6.3 Developer Claim ownership PSID 8a50196a1675 Credits Jonas Höbenreich Requir...

6.3CVSS6.8AI score0.00403EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/27 12:0 a.m.20 views

WordPress WP Brutal AI Plugin < 2.06 is vulnerable to Cross Site Scripting (XSS)

Software WP Brutal AI Type Plugin Vulnerable versions 2.06 Fixed in 2.06 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2606 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 658179337e78 Credits Taurus Omar Required privilege...

4.8CVSS6AI score0.02201EPSS
SaveExploits3References3Affected Software1
Patchstack
Patchstack
added 2023/07/26 12:0 a.m.20 views

WordPress HTTP Auth Plugin <= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software HTTP Auth Type Plugin Vulnerable versions = 0.3.2 Fixed in 1.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27435 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 3c605b41c95d Credits Mika Required privilege...

8.8CVSS6.6AI score0.0023EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/26 12:0 a.m.20 views

WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Woocommerce Category Banner Management Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.4.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-39158 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d5be1c9b0e8a...

6.5CVSS6.6AI score0.00218EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/26 12:0 a.m.20 views

WordPress Discussion Board Plugin <= 2.4.8 is vulnerable to Content Injection

Software Discussion Board Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A5: Broken Access Control Classification Content Injection CVE CVE-2023-39161 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e808296acb35 Credits Abdi Pranata Required privilege...

5.4CVSS6.6AI score0.00425EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/24 12:0 a.m.20 views

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Software CodeBard's Patron Button and Widgets for Patreon Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30491 Patch priority Medium CVSS severity Medium 7.1 Developer Codebard PSID 9bd81d51b303...

7.1CVSS5.7AI score0.00379EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/20 12:0 a.m.20 views

WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software Borderless Type Plugin Vulnerable versions = 1.4.8 Fixed in 1.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-38518 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c49a317f00bf Credits Rio Darmawan Required...

5.9CVSS5.7AI score0.00369EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/20 12:0 a.m.20 views

WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open Redirection

Software Integration for WooCommerce and Zoho CRM Type Plugin Vulnerable versions 1.3.7 Fixed in 1.3.7 OWASP Top 10 A5: Security Misconfiguration Classification Open Redirection CVE CVE-2023-38481 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 39fbc1d90c72 Credits Phd...

6.1CVSS6.9AI score0.00469EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/12 12:0 a.m.20 views

WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection

Software FluentForm Type Plugin Vulnerable versions = 4.3.25 Fixed in 5.0.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-24410 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 40a669c23487 Credits Ravi Dharmawan Required privilege Administrator...

9.8CVSS6.9AI score0.00739EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/07/06 12:0 a.m.20 views

WordPress SMTP Mail Plugin <= 1.3.36 is vulnerable to Cross Site Scripting (XSS)

Software SMTP Mail Type Plugin Vulnerable versions = 1.3.36 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3092 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 4ad93cce1cf5 Credits Alex Thomas Required privilege...

7.2CVSS5.7AI score0.00496EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/05 12:0 a.m.20 views

WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Media Library Helper by Codexin Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37386 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 31c3323d9133 Credits...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/06/28 12:0 a.m.20 views

WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.6.4 is vulnerable to Broken Authentication

Software WordPress Social Login and Register Discord, Google, Twitter, LinkedIn Type Plugin Vulnerable versions = 7.6.4 Fixed in 7.6.5 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2023-2982 Patch priority High CVSS severity High 9.8 Developer Claim ownership...

9.8CVSS6.5AI score0.46242EPSS
SaveExploits4References3Affected Software1
Patchstack
Patchstack
added 2023/06/28 12:0 a.m.20 views

WordPress LiquidPoll – Advanced Polls for Creators and Brands Plugin <= 3.3.68 is vulnerable to Broken Access Control

Software LiquidPoll – Advanced Polls for Creators and Brands Type Plugin Vulnerable versions = 3.3.68 Fixed in 3.3.69 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36531 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8bdf6fb868a6...

6.3AI score0.01026EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2023/06/27 12:0 a.m.20 views

WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

Software NOO Timetable Type Plugin Vulnerable versions = 2.1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-45821 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d615de5bc83f Credits Cat Required privilege...

6.5CVSS5.8AI score0.00358EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/06/26 12:0 a.m.20 views

WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software AutomateWoo Type Plugin Vulnerable versions = 5.7.5 Fixed in 5.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-36513 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID baa4f71a9406 Credits Rafie Muhammad Patchsta...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/06/20 12:0 a.m.20 views

WordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS)

Software MonsterInsights Pro Type Plugin Vulnerable versions = 8.14.1 Fixed in 8.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32291 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1c1883d581be Credits Rafie Muhammad...

6.5CVSS5.8AI score0.00496EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/06/20 12:0 a.m.20 views

WordPress Complianz Premium Plugin <= 6.4.6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Complianz Premium Type Plugin Vulnerable versions = 6.4.6.1 Fixed in 6.4.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-33333 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID d6646d9333a1 Credits Rafie Muhammad...

8.8CVSS8.7AI score0.00311EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/06/19 12:0 a.m.20 views

WordPress Photo Gallery by 10Web Plugin <= 1.8.15 is vulnerable to Broken Access Control

Software Photo Gallery by 10Web Type Plugin Vulnerable versions = 1.8.15 Fixed in 1.8.16 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-33995 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0293acc0bbe3 Credits Rafshanzani Suhada...

6.5AI score0.00498EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/06/12 12:0 a.m.20 views

WordPress Metform Elementor Contact Form Builder Plugin <= 3.3.0 is vulnerable to CSV Injection

Software Metform Elementor Contact Form Builder Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.3.1 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2023-0721 Patch priority Low CVSS severity Low 4.7 Developer Wpmet PSID 2f722b3f2145 Credits Ramuel Gall Required privilege...

8.3CVSS7.2AI score0.0071EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/06/05 12:0 a.m.20 views

WordPress Page Builder with Image Map by AZEXO Plugin <= 1.27.133 is vulnerable to Broken Access Control

Software Page Builder with Image Map by AZEXO Type Plugin Vulnerable versions = 1.27.133 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-3053 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID bcb4f38dcc4d Credits...

5.4CVSS6.5AI score0.00503EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/06/02 12:0 a.m.20 views

WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Advanced Flat rate shipping Woocommerce Type Plugin Vulnerable versions = 1.6.4.4 Fixed in 1.6.4.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-34015 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 47ba6a8a749f...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/05/30 12:0 a.m.20 views

WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)

Software Unite Gallery Lite Type Plugin Vulnerable versions = 1.7.61 Fixed in 1.7.62 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34183 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a4816cf27480 Credits yuyudhn Required...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/05/23 12:0 a.m.20 views

WordPress MPG Plugin <= 3.3.19 is vulnerable to SQL Injection

Software MPG Type Plugin Vulnerable versions = 3.3.19 Fixed in 3.3.20 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-33927 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID ad0baec3bee8 Credits LEE SE HYOUNG hackintoanetwork Required privilege...

9.8CVSS6.8AI score0.00675EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/05/22 12:0 a.m.20 views

WordPress Rank Math SEO PRO Plugin <= 3.0.35 is vulnerable to Cross Site Scripting (XSS)

Software Rank Math SEO PRO Type Plugin Vulnerable versions = 3.0.35 Fixed in 3.0.36 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32800 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 436b3db030cf Credits Rafie Muhamma...

7.1CVSS5.6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/05/11 12:0 a.m.20 views

WordPress Dyslexiefont Free Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Dyslexiefont Free Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32589 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fb7c8442b1dc Credits Yash Kanchhal...

8.8CVSS7AI score0.00271EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/05/05 12:0 a.m.20 views

WordPress TheGem Theme < 5.8.1.1 is vulnerable to Broken Access Control

Software TheGem Type Theme Vulnerable versions 5.8.1.1 Fixed in 5.8.1.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32238 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID dc2acc465d5c Credits Dave Jong Patchstack Required privile...

6.2AI score0.00173EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/05/05 12:0 a.m.20 views

WordPress Advanced Custom Fields PRO Plugin <= 6.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields PRO Type Plugin Vulnerable versions = 6.1.5 Fixed in 6.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30777 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 007d3de805e3 Credits Rafie...

7.1CVSS6.4AI score0.38768EPSS
SaveExploits3References2Affected Software1
Patchstack
Patchstack
added 2023/05/02 12:0 a.m.20 views

WordPress Ninja Forms Plugin < 3.6.22 is vulnerable to Cross Site Scripting (XSS)

Software Ninja Forms Type Plugin Vulnerable versions 3.6.22 Fixed in 3.6.22 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1835 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6f98d6f740b2 Credits Erwan LR WPScan Required...

6.1CVSS5.9AI score0.00925EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2023/04/20 12:0 a.m.20 views

WordPress ChatBot Plugin <= 4.4.8 is vulnerable to Cross Site Scripting (XSS)

Software ChatBot Type Plugin Vulnerable versions = 4.4.8 Fixed in 4.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1660 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 427a28b8a8ff Credits Erwan LR Required privilege...

6.1CVSS5.9AI score0.00269EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2023/04/19 12:0 a.m.20 views

WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Motors – Car Dealer & Classified Ads Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-38716 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 076e6b4c8854 Credit...

8.8CVSS7AI score0.00248EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/04/18 12:0 a.m.20 views

WordPress Photo Gallery by 10Web Plugin < 1.8.3 is vulnerable to Cross Site Scripting (XSS)

Software Photo Gallery by 10Web Type Plugin Vulnerable versions 1.8.3 Fixed in 1.8.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4058 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ee71d42f5999 Credits Krzysztof Zając...

5.4CVSS6AI score0.00244EPSS
SaveExploits2References4Affected Software1
Patchstack
Patchstack
added 2023/04/16 12:0 a.m.20 views

WordPress Quiz And Survey Master Plugin <= 8.1.4 is vulnerable to SQL Injection

Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.4 Fixed in 8.1.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-28787 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 34ea65c01c78 Credits Rafie Muhammad Patchstack Required...

9.3CVSS7.2AI score0.0196EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/04/11 12:0 a.m.20 views

WordPress JetEngine Plugin < 3.1.3.1 is vulnerable to Remote Code Execution (RCE)

Software JetEngine Type Plugin Vulnerable versions 3.1.3.1 Fixed in 3.1.3.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-1406 Patch priority High CVSS severity High 9.1 Developer Crocoblock PSID a91fe4278b33 Credits R3zk0n Required privilege Author Published 11...

8.8CVSS7.2AI score0.01519EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
added 2023/04/07 12:0 a.m.20 views

WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection

Software Spiffy Calendar Type Plugin Vulnerable versions = 4.9.1 Fixed in 4.9.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-46859 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 127ff2924c25 Credits Justiice Required privilege Subscriber Publishe...

9.8CVSS7.2AI score0.0055EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/04/05 12:0 a.m.20 views

WordPress WP FEvents Book Plugin <= 0.46 is vulnerable to Insecure Direct Object References (IDOR)

Software WP FEvents Book Type Plugin Vulnerable versions = 0.46 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-1129 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID bdca07c43d3d Credits Ameen Alkurdy...

6.5CVSS6.5AI score0.00555EPSS
SaveExploits2References2Affected Software1
Total number of security vulnerabilities5000