Wordfence Intelligence Weekly WordPress Vulnerability Report (May 22, 2023 to May 28, 2023)

🗓️ 01 Jun 2023 12:43:43Reported by Chloe ChamberlandType

Wordfence Intelligence Weekly Report May 22-28, 2023. 90 vulnerabilities in 77 WordPress Plugins. 29 Researchers contributed. Enhanced firewall protection deployed

Reporter	Title	Published	Views	Family All 1011
WPVulnDB	OAuth Single Sign On – SSO (OAuth Client) < 6.23.4 - Improper Authentication	20 Jul 202300:00	–	wpvulndb
WPVulnDB	MStore API < 3.9.3 - Authentication Bypass	24 May 202300:00	–	wpvulndb
WPVulnDB	WIP Custom Login < 1.3.0 - Cross-Site Request Forgery (CSRF)	22 May 202300:00	–	wpvulndb
WPVulnDB	EventPrime < 3.0.0 - Unauthenticated Reflected XSS	22 May 202300:00	–	wpvulndb
WPVulnDB	WooCommerce Follow-Up Emails < 4.9.50 - Unauthenticated Reflected XSS	22 May 202300:00	–	wpvulndb
WPVulnDB	Easy Google Maps < 1.11.8 - Cross-Site Request Forgery (CSRF)	24 May 202300:00	–	wpvulndb
WPVulnDB	WooCommerce Follow-Up Emails < 4.9.50 - Cross-Site Request Forgery (CSRF)	22 May 202300:00	–	wpvulndb
WPVulnDB	WordPress File Upload and WordPress File Upload Pro < 4.19.2 - Admin+ Stored Cross-Site Scripting	23 May 202300:00	–	wpvulndb
WPVulnDB	QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi	26 May 202300:00	–	wpvulndb
WPVulnDB	WooCommerce Product Vendors < 2.1.77 - Reflected XSS	21 Jun 202300:00	–	wpvulndb

01 Jun 2023 12:43Current

8.3High risk

Vulners AI Score8.3

EPSS0.67511