Vendor CVEs

WordPress

All CVEs

40,101 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-12159	WordPress Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords	Med	0.34	5.3	0.00	Jan 7, 2025	The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the print_php_information.php being publicly accessible. This makes it possible for…
CVE-2024-12158	WordPress Ultimate Popup Creator	Med	0.34	5.3	0.00	Jan 7, 2025	The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'upc_delete_db_data' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for…
CVE-2024-11290	WordPress Member Access	Med	0.34	5.3	0.00	Jan 7, 2025	The Member Access plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been…
CVE-2022-47601	WordPress Wp Table Manager	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Table Manager: from n/a through 3.5.2.
CVE-2023-48739	WordPress Porto Functionality	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality porto-functionality allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Porto Theme - Functionality: from n/a through < 2.12.1.
CVE-2024-56238	WordPress Floating Action Buttons	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Floating Action Buttons: from n/a through <= 0.9.1.
CVE-2023-47515	Seers Seers	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Seers Seers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seers: from n/a through 8.1.1.
CVE-2023-47241	WordPress CoCart – Headless ecommerce	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headless ecommerce: from n/a through <= 3.11.2.
CVE-2023-47188	Presstigers Simple Job Board	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through <= 2.10.5.
CVE-2023-47183	Givewp Givewp	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= 2.33.1.
CVE-2023-46639	WordPress Kk Star Ratings	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.5.
CVE-2023-46637	WordPress Generate Dummy Posts	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Generate Dummy Posts: from n/a through 1.0.0.
CVE-2023-46635	Yithemes YITH WooCommerce Product Add-Ons	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.2.0.
CVE-2023-46611	WordPress Yop Poll	Med	0.34	5.3	0.00	Jan 2, 2025	Authentication Bypass by Primary Weakness vulnerability in yourownprogrammer YOP Poll allows Authentication Bypass.This issue affects YOP Poll: from n/a through 6.5.28.
CVE-2023-46608	WordPress DoLogin Security	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in WPDO DoLogin Security dologin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DoLogin Security: from n/a through <= 3.7.1.
CVE-2023-46606	WordPress Atomchat	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through <= 1.1.4.
CVE-2023-46605	WordPress Convertful	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Convertful – Your Ultimate On-Site Conversion Tool: from n/a through 2.5.
CVE-2023-46309	Gvectors Wpdiscuz	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.10.
CVE-2023-46206	WordPress Mw Wp Form	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through <= 4.4.5.
CVE-2023-46083	WordPress Kali Forms	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.27.
CVE-2023-46082	WordPress Broken Link Checker \| Finder	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Cyberlord92 Broken Link Checker \| Finder broken-link-finder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Checker \| Finder: from n/a through <= 2.4.2.
CVE-2023-46073	WordPress Dx Delete Attached Media	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through <= 2.0.5.1.
CVE-2023-45766	Ays Pro Poll Maker	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 4.7.1.
CVE-2023-45649	WordPress Appointment Hour Booking	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in codepeople Appointment Hour Booking appointment-hour-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Hour Booking: from n/a through <= 1.4.23.
CVE-2023-44258	Schemaapp Schema App Structured Data	Med	0.34	5.3	0.00	Jan 2, 2025	Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through <= 1.23.1.
CVE-2024-49694	WordPress My Wp Brand	Med	0.34	5.3	0.00	Dec 31, 2024	Missing Authorization vulnerability in imw3 My Wp Brand my-wp-brand.This issue affects My Wp Brand: from n/a through <= 1.1.2.
CVE-2023-48775	WordPress Wp Cleanfix	Med	0.34	5.3	0.00	Dec 31, 2024	Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2.
CVE-2024-11605	WordPress wp-publications	Med	0.34	4.8	0.01	Dec 27, 2024	The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2024-12034	WordPress Advanced Google Recaptcha	Med	0.34	5.3	0.00	Dec 24, 2024	The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to…
CVE-2018-25106	Webuidesigning Nebulax	Med	0.34	6.3	0.00	Dec 23, 2024	A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebula_send_to_hubspot of the file libs/Legacy/Legacy.php. The manipulation leads to sql injection. The attack may be…
CVE-2024-11297	WordPress Page Restriction WordPress (WP)	Med	0.34	5.3	0.01	Dec 20, 2024	The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.6 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract…
CVE-2024-11768	WordPress Download Manager	Med	0.34	5.3	0.00	Dec 19, 2024	The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers…
CVE-2024-12250	WordPress Accept Authorize Net Payments Using Contact Form 7	Med	0.34	5.3	0.00	Dec 18, 2024	The Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2 via the cf7adn-info.php file. This makes it possible for unauthenticated attackers to extract configuration data which can…
CVE-2024-12601	WordPress Calculated Fields Form	Med	0.34	5.3	0.01	Dec 17, 2024	The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple…
CVE-2024-55999	WordPress XML Multilanguage Sitemap Generator	Med	0.34	5.3	0.00	Dec 16, 2024	Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through <= 2.0.6.
CVE-2024-56009	WordPress Spreadr Woocommerce	Med	0.34	5.3	0.00	Dec 16, 2024	Missing Authorization vulnerability in spreadr Spreadr Woocommerce spreadr-for-woocomerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Spreadr Woocommerce: from n/a through <= 1.0.4.
CVE-2024-55993	WordPress Job Board Manager	Med	0.34	5.3	0.01	Dec 16, 2024	Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through <= 2.1.61.
CVE-2024-54417	WordPress Pixproof	Med	0.34	5.3	0.01	Dec 16, 2024	Missing Authorization vulnerability in pixelgrade PixProof pixproof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through <= 2.0.1.
CVE-2024-12578	WordPress Tickera	Med	0.34	5.3	0.01	Dec 14, 2024	The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickera_tickets_info' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from…
CVE-2024-54310	WordPress Gou Manage My Account Menu	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in Aslam Khan Gouran Gou Manage My Account Menu gou-wc-account-tabs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Gou Manage My Account Menu: from n/a through <= 1.0.1.8.
CVE-2023-44149	WordPress BeRocket Brands for WooCommerce	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through <= 3.8.2.2.
CVE-2023-44147	WordPress Comment Blacklist Updater	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comment Blacklist Updater: from n/a through <= 1.1.0.
CVE-2023-41952	WPManageNinja LLC FluentForm	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 5.0.8.
CVE-2023-41875	Wpdirectorykit Wp Directory Kit	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through 1.2.6.
CVE-2023-41862	WordPress VS Contact Form	Med	0.34	5.3	0.01	Dec 13, 2024	Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0.
CVE-2023-41849	WordPress Posts Like Dislike	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.
CVE-2023-41848	Majeedraza Carousel Slider	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.
CVE-2023-41803	WordPress Bitpay Checkout For Woocommerce	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0.
CVE-2023-41690	Wiser Notify WiserNotify Social Proof	Med	0.34	5.3	0.01	Dec 13, 2024	Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify Social Proof: from n/a through 2.5.
CVE-2023-41133	WordPress Secure Admin IP	Med	0.34	5.3	0.01	Dec 13, 2024	Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionality Bypass.This issue affects Secure Admin IP: from n/a through 2.0.

CVE-2024-12159MedJan 7, 2025
WordPress
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords
risk 0.34cvss 5.3epss 0.00
The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the print_php_information.php being publicly accessible. This makes it possible for…
CVE-2024-12158MedJan 7, 2025
WordPress
Ultimate Popup Creator
risk 0.34cvss 5.3epss 0.00
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'upc_delete_db_data' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for…
CVE-2024-11290MedJan 7, 2025
WordPress
Member Access
risk 0.34cvss 5.3epss 0.00
The Member Access plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been…
CVE-2022-47601MedJan 2, 2025
WordPress
Wp Table Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Table Manager: from n/a through 3.5.2.
CVE-2023-48739MedJan 2, 2025
WordPress
Porto Functionality
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality porto-functionality allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Porto Theme - Functionality: from n/a through < 2.12.1.
CVE-2024-56238MedJan 2, 2025
WordPress
Floating Action Buttons
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Floating Action Buttons: from n/a through <= 0.9.1.
CVE-2023-47515MedJan 2, 2025
Seers
Seers
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Seers Seers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seers: from n/a through 8.1.1.
CVE-2023-47241MedJan 2, 2025
WordPress
CoCart – Headless ecommerce
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headless ecommerce: from n/a through <= 3.11.2.
CVE-2023-47188MedJan 2, 2025
Presstigers
Simple Job Board
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through <= 2.10.5.
CVE-2023-47183MedJan 2, 2025
Givewp
Givewp
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= 2.33.1.
CVE-2023-46639MedJan 2, 2025
WordPress
Kk Star Ratings
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.5.
CVE-2023-46637MedJan 2, 2025
WordPress
Generate Dummy Posts
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Generate Dummy Posts: from n/a through 1.0.0.
CVE-2023-46635MedJan 2, 2025
Yithemes
YITH WooCommerce Product Add-Ons
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.2.0.
CVE-2023-46611MedJan 2, 2025
WordPress
Yop Poll
risk 0.34cvss 5.3epss 0.00
Authentication Bypass by Primary Weakness vulnerability in yourownprogrammer YOP Poll allows Authentication Bypass.This issue affects YOP Poll: from n/a through 6.5.28.
CVE-2023-46608MedJan 2, 2025
WordPress
DoLogin Security
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WPDO DoLogin Security dologin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DoLogin Security: from n/a through <= 3.7.1.
CVE-2023-46606MedJan 2, 2025
WordPress
Atomchat
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through <= 1.1.4.
CVE-2023-46605MedJan 2, 2025
WordPress
Convertful
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Convertful – Your Ultimate On-Site Conversion Tool: from n/a through 2.5.
CVE-2023-46309MedJan 2, 2025
Gvectors
Wpdiscuz
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.10.
CVE-2023-46206MedJan 2, 2025
WordPress
Mw Wp Form
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through <= 4.4.5.
CVE-2023-46083MedJan 2, 2025
WordPress
Kali Forms
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.27.
CVE-2023-46082MedJan 2, 2025
WordPress
Broken Link Checker | Finder
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Cyberlord92 Broken Link Checker | Finder broken-link-finder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Checker | Finder: from n/a through <= 2.4.2.
CVE-2023-46073MedJan 2, 2025
WordPress
Dx Delete Attached Media
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through <= 2.0.5.1.
CVE-2023-45766MedJan 2, 2025
Ays Pro
Poll Maker
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 4.7.1.
CVE-2023-45649MedJan 2, 2025
WordPress
Appointment Hour Booking
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in codepeople Appointment Hour Booking appointment-hour-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Hour Booking: from n/a through <= 1.4.23.
CVE-2023-44258MedJan 2, 2025
Schemaapp
Schema App Structured Data
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through <= 1.23.1.
CVE-2024-49694MedDec 31, 2024
WordPress
My Wp Brand
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in imw3 My Wp Brand my-wp-brand.This issue affects My Wp Brand: from n/a through <= 1.1.2.
CVE-2023-48775MedDec 31, 2024
WordPress
Wp Cleanfix
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2.
CVE-2024-11605MedDec 27, 2024
WordPress
wp-publications
risk 0.34cvss 4.8epss 0.01
The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…
CVE-2024-12034MedDec 24, 2024
WordPress
Advanced Google Recaptcha
risk 0.34cvss 5.3epss 0.00
The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to…
CVE-2018-25106MedDec 23, 2024
Webuidesigning
Nebulax
risk 0.34cvss 6.3epss 0.00
A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebula_send_to_hubspot of the file libs/Legacy/Legacy.php. The manipulation leads to sql injection. The attack may be…
CVE-2024-11297MedDec 20, 2024
WordPress
Page Restriction WordPress (WP)
risk 0.34cvss 5.3epss 0.01
The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.6 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract…
CVE-2024-11768MedDec 19, 2024
WordPress
Download Manager
risk 0.34cvss 5.3epss 0.00
The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers…
CVE-2024-12250MedDec 18, 2024
WordPress
Accept Authorize Net Payments Using Contact Form 7
risk 0.34cvss 5.3epss 0.00
The Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2 via the cf7adn-info.php file. This makes it possible for unauthenticated attackers to extract configuration data which can…
CVE-2024-12601MedDec 17, 2024
WordPress
Calculated Fields Form
risk 0.34cvss 5.3epss 0.01
The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple…
CVE-2024-55999MedDec 16, 2024
WordPress
XML Multilanguage Sitemap Generator
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through <= 2.0.6.
CVE-2024-56009MedDec 16, 2024
WordPress
Spreadr Woocommerce
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in spreadr Spreadr Woocommerce spreadr-for-woocomerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Spreadr Woocommerce: from n/a through <= 1.0.4.
CVE-2024-55993MedDec 16, 2024
WordPress
Job Board Manager
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through <= 2.1.61.
CVE-2024-54417MedDec 16, 2024
WordPress
Pixproof
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in pixelgrade PixProof pixproof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through <= 2.0.1.
CVE-2024-12578MedDec 14, 2024
WordPress
Tickera
risk 0.34cvss 5.3epss 0.01
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickera_tickets_info' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from…
CVE-2024-54310MedDec 13, 2024
WordPress
Gou Manage My Account Menu
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Aslam Khan Gouran Gou Manage My Account Menu gou-wc-account-tabs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Gou Manage My Account Menu: from n/a through <= 1.0.1.8.
CVE-2023-44149MedDec 13, 2024
WordPress
BeRocket Brands for WooCommerce
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through <= 3.8.2.2.
CVE-2023-44147MedDec 13, 2024
WordPress
Comment Blacklist Updater
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comment Blacklist Updater: from n/a through <= 1.1.0.
CVE-2023-41952MedDec 13, 2024
WPManageNinja LLC
FluentForm
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 5.0.8.
CVE-2023-41875MedDec 13, 2024
Wpdirectorykit
Wp Directory Kit
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through 1.2.6.
CVE-2023-41862MedDec 13, 2024
WordPress
VS Contact Form
risk 0.34cvss 5.3epss 0.01
Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0.
CVE-2023-41849MedDec 13, 2024
WordPress
Posts Like Dislike
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.
CVE-2023-41848MedDec 13, 2024
Majeedraza
Carousel Slider
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.
CVE-2023-41803MedDec 13, 2024
WordPress
Bitpay Checkout For Woocommerce
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0.
CVE-2023-41690MedDec 13, 2024
Wiser Notify
WiserNotify Social Proof
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify Social Proof: from n/a through 2.5.
CVE-2023-41133MedDec 13, 2024
WordPress
Secure Admin IP
risk 0.34cvss 5.3epss 0.01
Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionality Bypass.This issue affects Secure Admin IP: from n/a through 2.0.

Page 592 of 803