VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

40,172 total · sorted by risk
  • CVE-2023-36520MedDec 20, 2023
    Zackgrossbart
    Editorial Calendar
    risk 0.35cvss 5.4epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12.

  • CVE-2023-38513MedDec 20, 2023
    Jordy Meow
    Photo Engine
    risk 0.35cvss 5.4epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine (Media Organizer & Lightroom).This issue affects Photo Engine (Media Organizer & Lightroom): from n/a through 6.2.5.

  • CVE-2023-50835MedDec 19, 2023
    Praveengoswami
    Advanced Category Template
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advanced Category Template: from n/a through 0.1.

  • CVE-2023-49164MedDec 19, 2023
    Oceanwp
    Ocean Extra
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through 2.2.2.

  • CVE-2023-25715MedDec 19, 2023
    Gamipress
    Gamipress
    risk 0.35cvss 5.4epss 0.01

    Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress.This issue affects GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress: from n/a…

  • CVE-2023-5432MedDec 19, 2023
    WordPress
    Jquery news ticker
    risk 0.35cvss 6.4epss 0.00

    The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortcode in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…

  • CVE-2023-5413MedDec 19, 2023
    WordPress
    Image Horizontal Reel Scroll Slideshow
    risk 0.35cvss 6.4epss 0.00

    The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-gallery' shortcode in versions up to, and including, 13.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • CVE-2023-6488MedDec 19, 2023
    WordPress
    Shortcodes Ultimate
    risk 0.35cvss 5.4epss 0.00

    The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_button', 'su_members', and 'su_tabs' shortcodes in all versions up to, and including, 7.0.0 due to insufficient input sanitization and output…

  • CVE-2023-44982MedDec 19, 2023
    Meowapps
    Perfect Images
    risk 0.35cvss 5.3epss 0.01

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina).This issue affects Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina): from n/a through 6.4.5.

  • CVE-2023-49821MedDec 18, 2023
    Livechat
    Livechat
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in LiveChat LiveChat – WP live chat plugin for WordPress.This issue affects LiveChat – WP live chat plugin for WordPress: from n/a through 4.5.15.

  • CVE-2023-49761MedDec 18, 2023
    Gravitymaster
    Product Enquiry For Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Gravity Master Product Enquiry for WooCommerce.This issue affects Product Enquiry for WooCommerce: from n/a through 3.0.

  • CVE-2023-49760MedDec 18, 2023
    Giannopouloskostas
    Wpsoononlinepage
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Giannopoulos Kostas WPsoonOnlinePage.This issue affects WPsoonOnlinePage: from n/a through 1.9.

  • CVE-2023-49759MedDec 18, 2023
    WordPress
    WooDiscuz – WooCommerce Comments
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0.

  • CVE-2023-49163MedDec 18, 2023
    Mtrv
    Teachpress
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a through 9.0.5.

  • CVE-2023-49148MedDec 18, 2023
    Kulwant Nagi
    Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Kulwant Nagi Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates.This issue affects Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates: from n/a through 3.0.5.

  • CVE-2023-48778MedDec 18, 2023
    Villatheme
    Product Size Chart For Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Product Size Chart For WooCommerce: from n/a through 1.1.5.

  • CVE-2023-48773MedDec 18, 2023
    Wpdoctor
    Woocommerce Login Redirect
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in WP Doctor WooCommerce Login Redirect.This issue affects WooCommerce Login Redirect: from n/a through 2.2.4.

  • CVE-2023-48772MedDec 18, 2023
    Arulprasadj
    Prevent Landscape Rotation
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Arul Prasad J Prevent Landscape Rotation.This issue affects Prevent Landscape Rotation: from n/a through 2.0.

  • CVE-2023-46617MedDec 18, 2023
    Wpfoxly
    Adfoxly
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt.This issue affects AdFoxly – Ad Manager, AdSense Ads & Ads.Txt: from n/a through 1.8.5.

  • CVE-2023-47806MedDec 18, 2023
    Saintsystems
    Disable User Login
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Saint Systems Disable User Login.This issue affects Disable User Login: from n/a through 1.3.7.

  • CVE-2023-33214MedDec 18, 2023
    WordPress
    Tagbox
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1.

  • CVE-2023-49853MedDec 18, 2023
    PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.
    Paytr Taksit Tablosu Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu – WooCommerce.This issue affects PayTR Taksit Tablosu – WooCommerce: from n/a through 1.3.1.

  • CVE-2023-49843MedDec 18, 2023
    Quanticedge
    First Order Discount Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in QuanticEdge First Order Discount Woocommerce.This issue affects First Order Discount Woocommerce: from n/a through 1.21.

  • CVE-2023-49854MedDec 18, 2023
    Caddy Project
    Caddy
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue affects Caddy – Smart Side Cart for WooCommerce: from n/a through 1.9.7.

  • CVE-2023-49834MedDec 17, 2023
    Pluginus
    Fox Currency Switcher Professional For Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher Professional for WooCommerce: from n/a through 1.4.1.4.

  • CVE-2023-49824MedDec 17, 2023
    Pixelyoursite
    Product Catalog Feed
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This issue affects Product Catalog Feed by PixelYourSite: from n/a through 2.1.1.

  • CVE-2023-49744MedDec 15, 2023
    WordPress
    Gift Up Gift Cards For Wordpress And Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Gift Up Gift Up Gift Cards for WordPress and WooCommerce.This issue affects Gift Up Gift Cards for WordPress and WooCommerce: from n/a through 2.21.3.

  • CVE-2023-5756MedDec 9, 2023
    Supsystic
    Digital Publications By Supsystic
    risk 0.35cvss 5.4epss 0.00

    The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers…

  • CVE-2023-35909MedDec 7, 2023
    WordPress
    Ninja Forms Contact Form
    risk 0.35cvss 5.3epss 0.01

    Uncontrolled Resource Consumption vulnerability in Saturday Drive Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress leading to DoS.This issue affects Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress: from n/a through 3.6.25.

  • CVE-2023-4460MedDec 4, 2023
    WordPress
    Uploading SVG, WEBP and ICO files
    risk 0.35cvss 5.4epss 0.01

    The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

  • CVE-2023-47875MedNov 30, 2023
    Perfmatters
    Perfmatters
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Perfmatters allows Cross Site Request Forgery.This issue affects Perfmatters: from n/a through 2.1.6.

  • CVE-2023-48754MedNov 30, 2023
    WordPress
    Delete Post Revisions In WordPress
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Wap Nepal Delete Post Revisions In WordPress allows Cross Site Request Forgery.This issue affects Delete Post Revisions In WordPress: from n/a through 4.6.

  • CVE-2023-6137MedNov 30, 2023
    Wpfrontier
    Frontier Post
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in finnj Frontier Post allows Cross Site Request Forgery.This issue affects Frontier Post: from n/a through 6.1.

  • CVE-2023-48744MedNov 30, 2023
    Offshorewebmaster
    Availability Calendar
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Offshore Web Master Availability Calendar allows Cross Site Request Forgery.This issue affects Availability Calendar: from n/a through 1.2.6.

  • CVE-2023-48334MedNov 30, 2023
    Daext
    League Table
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in DAEXT League Table allows Cross Site Request Forgery.This issue affects League Table: from n/a through 1.13.

  • CVE-2023-48330MedNov 30, 2023
    Supremo
    Bulk Comment Remove
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Mike Strand Bulk Comment Remove allows Cross Site Request Forgery.This issue affects Bulk Comment Remove: from n/a through 2.

  • CVE-2023-48282MedNov 30, 2023
    Andrea Landonio
    Taxonomy Filter
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio Taxonomy filter allows Cross Site Request Forgery.This issue affects Taxonomy filter: from n/a through 2.2.9.

  • CVE-2023-5942MedNov 27, 2023
    WordPress
    Medialist
    risk 0.35cvss 5.4epss 0.00

    The Medialist WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting…

  • CVE-2023-5738MedNov 27, 2023
    WordPress
    WordPress Backup & Migration
    risk 0.35cvss 5.4epss 0.00

    The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.

  • CVE-2023-5620MedNov 27, 2023
    WordPress
    Web Push Notification
    risk 0.35cvss 5.4epss 0.00

    The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be used to conduct Stored XSS attacks.

  • CVE-2023-4514MedNov 27, 2023
    WordPress
    Simple File List
    risk 0.35cvss 5.4epss 0.00

    The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site…

  • CVE-2023-47529MedNov 23, 2023
    WordPress
    Cloud Templates & Patterns collection
    risk 0.35cvss 5.3epss 0.01

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud Templates & Patterns collection: from n/a through 1.2.2.

  • CVE-2023-47668MedNov 23, 2023
    Liquidweb
    Restrict Content
    risk 0.35cvss 5.3epss 0.01

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin <= 3.2.7 versions.

  • CVE-2023-47824MedNov 22, 2023
    Wpwax
    Legal Pages
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin <= 1.3.8 versions.

  • CVE-2023-39925MedNov 22, 2023
    Peepso
    Peepso
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Download Community by PeepSo plugin <= 6.1.6.0 versions.

  • CVE-2023-47758MedNov 22, 2023
    Mondula
    Multi Step Form
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions.

  • CVE-2023-5706MedNov 22, 2023
    WordPress
    Vk Blocks
    risk 0.35cvss 6.4epss 0.01

    The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vk-blocks/ancestor-page-list' block in all versions up to, and including, 1.63.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…

  • CVE-2023-5667MedNov 22, 2023
    WordPress
    Tab Ultimate
    risk 0.35cvss 6.4epss 0.01

    The Tab Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…

  • CVE-2023-5664MedNov 22, 2023
    WordPress
    Garden Gnome Package
    risk 0.35cvss 6.4epss 0.01

    The Garden Gnome Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ggpkg' shortcode in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • CVE-2023-5469MedNov 22, 2023
    WordPress
    Drop Shadow Boxes
    risk 0.35cvss 6.4epss 0.01

    The Drop Shadow Boxes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dropshadowbox' shortcode in versions up to, and including, 1.7.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…

Page 536 of 804