Wordfence Intelligence Weekly WordPress Vulnerability Report (December 18, 2023 to December 31, 2023)

🗓️ 05 Jan 2024 13:20:47Reported by Chloe ChamberlandType

Wordfence Intelligence WordPress vulnerabilities report. 263 new vulnerabilities in 217 plugins, 3 themes. 42 researchers contributed. Free access to vulnerability API, CLI Scanner, webhooks. New firewall rules: Directory Traversal via HTTP Headers

Reporter	Title	Published	Views	Family All 3123
WPVulnDB	MF Gig Calendar <=1.2.1 - Authenticated(Contributor+) SQL Injection	5 Jan 202400:00	–	wpvulndb
WPVulnDB	WP Remote Site Search < 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	5 Jan 202400:00	–	wpvulndb
WPVulnDB	Uncanny Automator < 5.1.0.3 - Sensitive Information Exposure via Log File	5 Jan 202400:00	–	wpvulndb
WPVulnDB	Integrate Google Drive < 1.3.4 - Subscriber+ Settings Update	3 Jan 202400:00	–	wpvulndb
WPVulnDB	Send Users Email < 1.4.4 - Sensitive Information Exposure via Error Logs	5 Jan 202400:00	–	wpvulndb
WPVulnDB	Doofinder for WooCommerce < 2.1.1 - Missing Authorization via multiple AJAX actions	3 Jan 202400:00	–	wpvulndb
WPVulnDB	Restaurant Reservations < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting	5 Jan 202400:00	–	wpvulndb
WPVulnDB	Sticky Chat Widget < 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting	5 Jan 202400:00	–	wpvulndb
WPVulnDB	Login as User or Customer (User Switching) <= 3.8 - Authentication Bypass	5 Jan 202400:00	–	wpvulndb
WPVulnDB	Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir	22 Dec 202300:00	–	wpvulndb

05 Jan 2024 13:20Current

10High risk

Vulners AI Score10

EPSS0.3057