VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

39,910 total · sorted by risk
  • CVE-2024-5333MedDec 16, 2024
    WordPress
    The Events Calendar
    risk 0.28cvss 5.3epss 0.01

    The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events.

  • CVE-2024-10690MedDec 14, 2024
    WordPress
    Shortcode Elementor
    risk 0.28cvss 4.3epss 0.00

    The Shortcodes for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.4 via the 'SHORTCODE_ELEMENTOR' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated…

  • CVE-2024-12447MedDec 14, 2024
    WordPress
    Get Post Content Shortcode
    risk 0.28cvss 4.3epss 0.00

    The Get Post Content Shortcode plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.4 via the 'post-content' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated…

  • CVE-2024-54321MedDec 13, 2024
    WordPress
    Hive Support
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Hive Support Hive Support hive-support allows Cross Site Request Forgery.This issue affects Hive Support: from n/a through <= 1.1.2.

  • CVE-2024-54307MedDec 13, 2024
    WordPress
    Aicomments
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in aipost AIcomments aicomments allows Cross Site Request Forgery.This issue affects AIcomments: from n/a through <= 1.4.1.

  • CVE-2024-54306MedDec 13, 2024
    WordPress
    AIKCT Engine Chatbot
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in aitool AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot ai-seo-translator allows Cross Site Request Forgery.This issue affects AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot: from n/a through <= 1.6.2.

  • CVE-2024-54300MedDec 13, 2024
    WordPress
    Autowp AI Content Writer Rewriter
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Cross Site Request Forgery.This issue affects AutoWP: from n/a through <= 2.0.8.

  • CVE-2024-54298MedDec 13, 2024
    WordPress
    Cardealer
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in sminozzi Car Dealer cardealer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Dealer: from n/a through <= 4.46.

  • CVE-2024-54278MedDec 13, 2024
    WordPress
    News Ticker For Elementor
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects News Ticker for Elementor: from n/a through <= 2.1.3.

  • CVE-2024-54267MedDec 13, 2024
    WordPress
    Cm Answers
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM Answers: from n/a through <= 3.2.6.

  • CVE-2023-41951MedDec 13, 2024
    WordPress
    Rtmedia
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14.

  • CVE-2023-41873MedDec 13, 2024
    Miniorange
    Saml Sp Single Sign On
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SAML SP Single Sign On: from n/a through 5.0.4.

  • CVE-2023-41870MedDec 13, 2024
    Themeum
    Wp Crowdfunding
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5.

  • CVE-2023-41869MedDec 13, 2024
    Alex Volkov
    Wp Accessibility Helper (wah)
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.4.

  • CVE-2023-41866MedDec 13, 2024
    WordPress
    Automatic Youtube Gallery
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic YouTube Gallery: from n/a through 2.3.3.

  • CVE-2023-41865MedDec 13, 2024
    WordPress
    Sliderpro
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro: from n/a through 4.8.6.

  • CVE-2023-41802MedDec 13, 2024
    Heateor
    Super Socializer
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Socializer: from n/a through 7.13.54.

  • CVE-2023-41689MedDec 13, 2024
    WordPress
    Post To Google My Business
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Koen Reus Post to Google My Business (Google Business Profile) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post to Google My Business (Google Business Profile): from n/a through 3.1.14.

  • CVE-2023-41132MedDec 13, 2024
    Shapedplugin
    Product Slider Pro for WooCommerce
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Category Slider for WooCommerce: from n/a through 1.4.15.

  • CVE-2023-40670MedDec 13, 2024
    Wpdeveloper
    Reviewx
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.17.

  • CVE-2023-40334MedDec 13, 2024
    Pluginus
    Husky Products Filter Professional For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HUSKY: from n/a through <= 1.3.4.2.

  • CVE-2023-40331MedDec 13, 2024
    WordPress
    Accordion Slider
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion Slider: from n/a through 1.9.6.

  • CVE-2023-40213MedDec 13, 2024
    WordPress
    Justified Gallery
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justified Gallery: from n/a through 1.7.3.

  • CVE-2023-40203MedDec 13, 2024
    Mailmunch
    Mailchimp Forms
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4.

  • CVE-2023-40001MedDec 13, 2024
    WordPress
    Ithemes Sync
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iThemes Sync: from n/a through 2.1.13.

  • CVE-2023-39995MedDec 13, 2024
    WordPress
    Portfolio And Projects
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio and Projects: from n/a through 1.3.7.

  • CVE-2023-38514MedDec 13, 2024
    WordPress
    Social Share Icons \& Social Share Buttons
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.5.7.

  • CVE-2023-38477MedDec 13, 2024
    WordPress
    QR code MeCard/vCard generator
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0.

  • CVE-2023-38475MedDec 13, 2024
    WordPress
    Donations Made Easy – Smart Donations
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.

  • CVE-2023-37984MedDec 13, 2024
    WordPress
    Quiz and Survey Master (QSM)
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through 8.1.10.

  • CVE-2023-36531MedDec 13, 2024
    WordPress
    LiquidPoll
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll – Advanced Polls for Creators and Brands: from n/a through 3.3.68.

  • CVE-2023-36518MedDec 13, 2024
    WordPress
    Post Hit Counter
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Hugh Lashbrooke Post Hit Counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Hit Counter: from n/a through 1.3.2.

  • CVE-2023-35052MedDec 13, 2024
    WordPress
    Business Directory Plugin
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in wpWax - WP Business Directory Plugin and Classified Listings Directory Directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through 7.5.4.

  • CVE-2023-34387MedDec 13, 2024
    Constant Contact
    Constant Contact Forms
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3.

  • CVE-2023-34009MedDec 13, 2024
    WordPress
    Social Media & Share Icons
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media & Share Icons: from n/a through 2.8.1.

  • CVE-2023-33998MedDec 13, 2024
    WordPress
    Easy Social Icons
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in cybernetikz Easy Social Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Icons: from n/a through 3.2.5.

  • CVE-2023-33995MedDec 13, 2024
    WordPress
    Photo Gallery By 10web
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15.

  • CVE-2023-33928MedDec 13, 2024
    WordPress
    WordPress Backup & Migration
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through 1.4.0.

  • CVE-2023-32599MedDec 13, 2024
    WordPress
    Recaptcha For All
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Bill Minozzi reCAPTCHA for all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects reCAPTCHA for all: from n/a through 1.22.

  • CVE-2023-32586MedDec 13, 2024
    WordPress
    Soundcloud Is Gold
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through 2.5.1.

  • CVE-2023-32574MedDec 13, 2024
    WordPress
    Injection Guard
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through 1.2.1.

  • CVE-2023-32519MedDec 13, 2024
    WordPress
    Wcp Contact Form
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0.

  • CVE-2023-28990MedDec 13, 2024
    WordPress
    Viral Mag
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in HashThemes Viral Mag allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Viral Mag: from n/a through 1.0.9.

  • CVE-2023-27456MedDec 13, 2024
    WordPress
    Total
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19.

  • CVE-2022-47176MedDec 13, 2024
    Averta
    Depicter Slider
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through 1.9.0.

  • CVE-2022-47168MedDec 13, 2024
    WordPress
    Printful Integration for WooCommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in printful Printful Integration for WooCommerce printful-shipping-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printful Integration for WooCommerce: from n/a through <= 2.2.3.

  • CVE-2022-46811MedDec 13, 2024
    Villatheme
    ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in VillaTheme(villatheme.com) ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress…

  • CVE-2022-46807MedDec 13, 2024
    Lauri Karisola / WP Trio
    Stock Sync for WooCommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Sync for WooCommerce: from n/a through 2.3.2.

  • CVE-2022-45806MedDec 13, 2024
    WordPress
    Formidable Forms
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4.

  • CVE-2022-43472MedDec 13, 2024
    WordPress
    Eroom Zoom Meetings Webinar
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6.

Page 685 of 799