Lucene search

Wordfence Intelligence Weekly WordPress Vulnerability Report (December 4, 2023 to December 10, 2023)

🗓️ 14 Dec 2023 16:44:32Reported by Ram GallType

Wordfence Intelligence Weekly WordPress Vulnerability Report Dec 4-10, 2023. New bug bounty program, 109 vulnerabilities disclosed, free tools for security, new firewall rules for Premium, Care, and Response customers

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 199
cvelist	CVE-2023-49831 WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability	9 Dec 202411:30	–	cvelist
cvelist	CVE-2023-49820 WordPress Structured Content Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)	14 Dec 202315:53	–	cvelist
cvelist	CVE-2023-49752 WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection	20 Dec 202317:38	–	cvelist
cvelist	CVE-2023-49813 WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)	14 Dec 202315:51	–	cvelist
cvelist	CVE-2023-49828 WordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS)	14 Dec 202314:29	–	cvelist
cvelist	CVE-2023-49817 WordPress Flexible Woocommerce Checkout Field Editor plugin <= 2.0.1 - Broken Access Control vulnerability	9 Dec 202411:30	–	cvelist
cvelist	CVE-2023-49778 WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection	21 Dec 202312:37	–	cvelist
cvelist	CVE-2023-49837 WordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability	21 Mar 202417:07	–	cvelist
cvelist	CVE-2023-50369 WordPress Alma – Pay in installments or later for WooCommerce Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)	14 Dec 202313:50	–	cvelist
cvelist	CVE-2023-49812 WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)	19 Dec 202320:55	–	cvelist

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2023 16:32Current

9.6High risk

Vulners AI Score9.6

EPSS0.90329