VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

40,101 total · sorted by risk
  • CVE-2023-40005MedDec 13, 2024
    Awesomemotive
    Easy Digital Downloads
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through <= 3.1.5.

  • CVE-2023-39997MedDec 13, 2024
    Supsystic
    Popup
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19.

  • CVE-2023-39996MedDec 13, 2024
    WordPress
    Accordion And Accordion Slider
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion and Accordion Slider: from n/a through 1.2.4.

  • CVE-2023-39305MedDec 13, 2024
    WordPress
    Yet Another Stars Rating
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through <= 3.4.3.

  • CVE-2023-38480MedDec 13, 2024
    WordPress
    Booster Elementor Addons
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster Elementor Addons: from n/a through 1.4.9.

  • CVE-2023-38479MedDec 13, 2024
    WordPress
    Simple Googlebot Visit
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Codents Simple Googlebot Visit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Googlebot Visit: from n/a through 1.2.4.

  • CVE-2023-37969MedDec 13, 2024
    WordPress
    Checkout with Zelle on Woocommerce
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout with Zelle on Woocommerce: from n/a through 3.1.

  • CVE-2023-36528MedDec 13, 2024
    WordPress
    Kk Star Ratings
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.3.

  • CVE-2023-36506MedDec 13, 2024
    WordPress
    Yith Woocommerce Waiting List
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Waiting List: from n/a through 2.13.0.

  • CVE-2023-35875MedDec 13, 2024
    WordPress
    Gutenverse
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Jegstudio Gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse: from n/a through 1.8.5.

  • CVE-2023-35777MedDec 13, 2024
    WordPress
    The Events Calendar
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.1.2.2.

  • CVE-2023-34381MedDec 13, 2024
    WordPress
    Zippy
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Gesundheit Bewegt GmbH Zippy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zippy: from n/a through 1.6.2.

  • CVE-2023-32963MedDec 13, 2024
    WordPress
    Woocommerce Predictive Search
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in a3rev Software WooCommerce Predictive Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Predictive Search: from n/a through 5.8.0.

  • CVE-2023-32798MedDec 13, 2024
    WordPress
    Simple Page Ordering
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0.

  • CVE-2023-22697MedDec 13, 2024
    Ays Pro
    Survey Maker
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Survey Maker team Survey Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through 3.2.0.

  • CVE-2022-47429MedDec 13, 2024
    WordPress
    Coming Soon Landing Page and Maintenance Mode
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin allows Retrieve Embedded Sensitive Data.This issue affects Coming Soon Landing Page and Maintenance Mode WordPress Plugin: from n/a through 2.2.0.

  • CVE-2022-47182MedDec 13, 2024
    WordPress
    APIExperts Square for WooCommerce
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Wpexpertsio APIExperts Square for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.4.1.

  • CVE-2022-46846MedDec 13, 2024
    WordPress
    Trending/Popular Post Slider and Widget
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Trending/Popular Post Slider and Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trending/Popular Post Slider and Widget: from n/a through 1.5.7.

  • CVE-2022-44578MedDec 13, 2024
    WordPress
    Owl Carousel
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Pierre JEHAN Owl Carousel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Owl Carousel: from n/a through 0.5.3.

  • CVE-2024-11012MedDec 13, 2024
    WordPress
    The Notibar
    risk 0.34cvss 6.3epss 0.00

    The The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via njt_nofi_text AJAX action in all versions up to, and including, 2.1.4. This is due to the software allowing users to execute an action that does not…

  • CVE-2024-12265MedDec 12, 2024
    WordPress
    Web3 Crypto Payments by DePay for WooCommerce
    risk 0.34cvss 5.3epss 0.00

    The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/depay/wc/debug REST API endpoint in all versions up to, and including, 2.12.17. This makes it possible for…

  • CVE-2024-12255MedDec 12, 2024
    WordPress
    Accept Stripe Payments Using Contact Form 7
    risk 0.34cvss 5.3epss 0.01

    The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data. This makes it possible for unauthenticated attackers to extract…

  • CVE-2024-52480MedDec 9, 2024
    Astoundify
    Jobify
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Astoundify Jobify jobify.This issue affects Jobify: from n/a through < 4.3.0.

  • CVE-2024-52391MedDec 9, 2024
    WordPress
    Pie Register Premium
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3.

  • CVE-2023-41953MedDec 9, 2024
    Properfraction
    Profilepress
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1.

  • CVE-2024-54223MedDec 9, 2024
    Reputeinfosystems
    Arforms Form Builder
    risk 0.34cvss 5.3epss 0.00

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in reputeinfosystems ARForms Form Builder arforms-form-builder allows Code Injection.This issue affects ARForms Form Builder: from n/a through <= 1.7.1.

  • CVE-2024-53819MedDec 9, 2024
    WordPress
    Client Invoicing by Sprout Invoices
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.0.

  • CVE-2023-51362MedDec 9, 2024
    WordPress
    Mystickyelements
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through <= 2.1.3.

  • CVE-2023-51357MedDec 9, 2024
    WordPress
    Enhanced E Commerce For Woocommerce Store
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through <= 6.5.0.

  • CVE-2023-51353MedDec 9, 2024
    Supsystic
    Popup
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through <= 1.10.19.

  • CVE-2023-50903MedDec 9, 2024
    WordPress
    Metform
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through <= 3.4.0.

  • CVE-2023-50887MedDec 9, 2024
    WordPress
    User Feedback
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Feedback: from n/a through <= 1.0.10.

  • CVE-2023-50882MedDec 9, 2024
    Properfraction
    Profilepress
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through <= 4.13.2.

  • CVE-2023-50375MedDec 9, 2024
    WordPress
    Google Language Translator
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through <= 6.0.19.

  • CVE-2023-50373MedDec 9, 2024
    WordPress
    Alt Manager
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in WPSAAD Alt Manager alt-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alt Manager: from n/a through <= 1.6.1.

  • CVE-2023-49851MedDec 9, 2024
    WordPress
    Square Thumbnails
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in ILMDESIGNS Square Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square Thumbnails: from n/a through 1.1.1.

  • CVE-2023-49850MedDec 9, 2024
    WordPress
    Wp Simple HTML Sitemap
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through 2.7.

  • CVE-2023-49845MedDec 9, 2024
    WordPress
    Redirects
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in mattdeclaire Redirects redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirects: from n/a through <= 1.2.1.

  • CVE-2023-49832MedDec 9, 2024
    WordPress
    Site Reviews
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through <= 6.10.2.

  • CVE-2023-49818MedDec 9, 2024
    WordPress
    Webflow Pages
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow Pages: from n/a through 1.0.8.

  • CVE-2023-49194MedDec 9, 2024
    WordPress
    Importify
    risk 0.34cvss 5.3epss 0.01

    Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify (Dropshipping WooCommerce) importify allows Retrieve Embedded Sensitive Data.This issue affects Importify (Dropshipping WooCommerce): from n/a through <= 1.0.4.

  • CVE-2023-49193MedDec 9, 2024
    WordPress
    Hubbub Lite
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hubbub Lite: from n/a through <= 1.30.0.

  • CVE-2023-49192MedDec 9, 2024
    WordPress
    Enhanced Text Widget
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in cl272 Enhanced Text Widget enhanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Text Widget: from n/a through <= 1.6.3.

  • CVE-2023-49154MedDec 9, 2024
    Wow Company
    Button Generator
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Wow-Company Button Generator – easily Button Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8.

  • CVE-2023-48750MedDec 9, 2024
    WordPress
    Void Elementor Post Grid Addon For Elementor Page Builder
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in voidthemes Void Elementor Post Grid Addon for Elementor Page builder void-elementor-post-grid-addon-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Void Elementor Post…

  • CVE-2023-47847MedDec 9, 2024
    PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.
    PayTR Taksit Tablosu
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PayTR Taksit Tablosu: from n/a through 1.3.1.

  • CVE-2023-47832MedDec 9, 2024
    Searchiq
    Searchiq
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through <= 4.4.

  • CVE-2023-47823MedDec 9, 2024
    WordPress
    Formcraft
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft: from n/a through 1.2.7.

  • CVE-2023-47805MedDec 9, 2024
    Themewinter
    Wpcafe
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.

  • CVE-2023-32293MedDec 9, 2024
    WordPress
    Wrc Pricing Tables
    risk 0.34cvss 5.3epss 0.01

    Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WRC Pricing Tables: from n/a through 2.3.7.

Page 593 of 803