Lucene search

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 17, 2023 to July 23, 2023)

🗓️ 27 Jul 2023 15:29:52Reported by Chloe ChamberlandType

Wordfence weekly report: 62 new vulnerabilities in 1035 WordPress plugins & 90 themes. Enhanced firewall protection deployed for Spectra <= 2.6.6 SSRF. 30 unpatched & 32 patched vulnerabilities, with 54 medium & 7 high severity

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 199
Cvelist	CVE-2023-38516 WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)	3 Sep 202311:25	–	cvelist
Cvelist	CVE-2023-38482 WordPress Post Affiliate Pro Plugin <= 1.25.0 is vulnerable to Cross Site Scripting (XSS)	3 Sep 202311:38	–	cvelist
Cvelist	CVE-2023-38521 WordPress Exifography Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	3 Sep 202311:08	–	cvelist
Cvelist	CVE-2023-34011 WordPress ShopConstruct Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)	1 Sep 202311:18	–	cvelist
Cvelist	CVE-2023-36684 WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability	19 Jun 202413:50	–	cvelist
Cvelist	CVE-2023-36528 WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability	13 Dec 202414:23	–	cvelist
Cvelist	CVE-2023-38513 WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)	20 Dec 202313:52	–	cvelist
Cvelist	CVE-2023-30482 WordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)	8 Aug 202312:11	–	cvelist
Cvelist	CVE-2023-32600 WordPress Rank Math SEO Plugin <= 1.0.119 is vulnerable to Cross Site Scripting (XSS)	5 Aug 202323:00	–	cvelist
Cvelist	CVE-2023-38512 WordPress WpStream – Live Streaming, Video on Demand, Pay Per View Plugin <= 4.5.4 is vulnerable to Cross Site Request Forgery (CSRF)	27 Jul 202313:26	–	cvelist

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jul 2023 15:52Current

8.4High risk

Vulners AI Score8.4

EPSS0.67121