Vendor CVEs

WordPress

All CVEs

39,907 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-12201	WordPress Hash Form	Med	0.28	4.3	0.00	Dec 12, 2024	The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with…
CVE-2024-10583	WordPress Popup Maker	Med	0.28	5.4	0.00	Dec 12, 2024	The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_title’ parameter in all versions up to, and including, 1.20.2 due to insufficient input…
CVE-2024-12263	WordPress Orbisius Child Theme Creator	Med	0.28	4.3	0.00	Dec 12, 2024	The Child Theme Creator by Orbisius plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cloud_delete() and cloud_update() functions in all versions up to, and including, 1.5.5. This makes it possible for authenticated…
CVE-2024-12059	Elementinvader Elementinvader Addons For Elementor	Med	0.28	4.3	0.00	Dec 12, 2024	The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via the eli_option_value shortcode. This makes it possible for authenticated attackers, with Contributor-level access and…
CVE-2024-12526	Arena.im Arena.im	Med	0.28	4.3	0.00	Dec 12, 2024	The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4.1. This is due to missing or incorrect nonce validation on the 'albfre_user_action' AJAX action. This makes it possible…
CVE-2024-11709	WordPress AI Post Generator \| AutoWriter	Med	0.28	4.3	0.00	Dec 12, 2024	The AI Post Generator \| AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ai_post_generator_delete_Post AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated…
CVE-2024-12341	WordPress Custom Skins Contact Form 7	Med	0.28	4.3	0.00	Dec 12, 2024	The Custom Skins Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf7cs_action_callback' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with…
CVE-2024-54269	WordPress Notibar	Med	0.28	4.3	0.00	Dec 11, 2024	Missing Authorization vulnerability in Ninja Team Notibar notibar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notibar: from n/a through <= 2.1.4.
CVE-2024-11868	WordPress Learnpress	Med	0.28	5.3	0.01	Dec 10, 2024	The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This makes it possible for unauthenticated attackers to extract potentially…
CVE-2024-52385	WordPress Ht Team Member	Med	0.28	4.3	0.00	Dec 9, 2024	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpmart Team Member team-showcase-supreme.This issue affects Team Member: from n/a through <= 7.4.
CVE-2024-54227	WordPress Min And Max Quantity For Woocommerce	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Dotstore Minimum and Maximum Quantity for WooCommerce min-and-max-quantity-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimum and Maximum Quantity for WooCommerce: from n/a…
CVE-2024-53816	Themeum Tutor Lms Elementor Addons	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons tutor-lms-elementor-addons.This issue affects Tutor LMS Elementor Addons: from n/a through <= 2.1.5.
CVE-2024-53785	WordPress Chatter	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1.
CVE-2023-50899	Multivendorx Product Catalog Enquiry for WooCommerce	Med	0.28	5.4	0.01	Dec 9, 2024	Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2.
CVE-2023-50877	WordPress Woo Product Filter	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Filter by WBW: from n/a through 2.5.0.
CVE-2023-50876	Molongui Molongui	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Molongui: from n/a through 4.7.3.
CVE-2023-49861	WordPress Social Media Feather	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through <= 2.1.3.
CVE-2023-49859	WordPress Login With Ajax	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login With Ajax: from n/a through <= 4.1.
CVE-2023-49858	WordPress Custom Login	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Austin Custom Login custom-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login: from n/a through <= 4.1.0.
CVE-2023-49849	WordPress Shortcoder	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through <= 6.3.
CVE-2023-49835	Metaphorcreations Post Duplicator	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31.
CVE-2023-49758	WordPress Wp Booking System	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Roland Murg WP Booking System wp-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Booking System: from n/a through <= 2.0.19.2.
CVE-2023-49754	WordPress Bulk Edit Post Titles	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through <= 5.0.0.
CVE-2023-49196	WordPress Pagelayer	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Pagelayer Team PageLayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PageLayer: from n/a through 1.7.7.
CVE-2023-49156	Godaddy Godaddy Email Marketing	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in GoDaddy GoDaddy Email Marketing godaddy-email-marketing-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDaddy Email Marketing: from n/a through <= 1.4.3.
CVE-2023-48740	Easysocialfeed Easy Social Feed	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Sajid Javed Easy Social Feed easy-facebook-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Feed: from n/a through <= 6.5.1.
CVE-2023-48332	WordPress Wp Mail Bank	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Varun Sharma Mail Bank - #1 Mail SMTP Plugin for WordPress wp-mail-bank allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mail Bank - #1 Mail SMTP Plugin for WordPress: from n/a through <= 4.0.14.
CVE-2023-48277	WordPress Super Progressive Web Apps	Med	0.28	4.3	0.01	Dec 9, 2024	Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through <= 2.2.21.
CVE-2023-47871	WordPress Contact Form To Any API	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form to Any API: from n/a through 1.1.6.
CVE-2023-47869	Gvectors Wpforo Forum	Med	0.28	4.3	0.00	Dec 9, 2024	Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affects wpForo Forum: from n/a through 2.2.5.
CVE-2023-47849	WordPress Blossomthemes Email Newsletter	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes Email Newsletter: from n/a through <= 2.2.4.
CVE-2023-47841	WordPress Analytify	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through 5.1.1.
CVE-2023-47838	WordPress Conditional Fields for Contact Form 7	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Jules Colle Conditional Fields for Contact Form 7 cf7-conditional-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conditional Fields for Contact Form 7: from n/a through <= 2.4.1.
CVE-2023-47820	WordPress Wp Like Button	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Like Button: from n/a through 1.7.0.
CVE-2023-47793	WordPress Acme Fix Images	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Acme Themes Acme Fix Images acme-fix-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acme Fix Images: from n/a through <= 1.0.0.
CVE-2023-47780	WordPress Easyazon	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in flowdee EasyAzon easyazon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyAzon: from n/a through <= 5.1.0.
CVE-2023-47776	WordPress Miniorange OTP Verification	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects miniorange otp verification: from n/a through <= 4.2.1.
CVE-2023-47763	WordPress Wp Custom Admin Interface	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through <= 7.31.
CVE-2023-47762	Wpdeveloper Betterdocs	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterDocs: from n/a through <= 2.5.2.
CVE-2023-47761	WordPress Simple 301 Redirects by BetterLinks	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through <= 2.0.7.
CVE-2023-47760	Wpdeveloper Essential Blocks	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.
CVE-2023-47756	WordPress Welcome Email Editor	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcome Email Editor: from n/a through 5.0.6.
CVE-2023-32126	WordPress Salert	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: from n/a through 1.2.1.
CVE-2023-31073	WordPress Display custom fields in the frontend	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display custom fields in the frontend – Post and User Profile…
CVE-2023-30783	WordPress Smart Woocommerce Search	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0.
CVE-2023-30748	Easy Appointments Easy Appointments	Med	0.28	4.3	0.00	Dec 9, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7.
CVE-2023-30486	WordPress Square	Med	0.28	4.3	0.01	Dec 9, 2024	Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0.
CVE-2023-30476	WordPress Blogger Buzz	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in Sparkle Themes Blogger Buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blogger Buzz: from n/a through 1.2.2.
CVE-2023-29431	WordPress qTranslate X Cleanup and WPML Import	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through 3.0.1.
CVE-2023-29422	AlexaCRM Dynamics 365 Integration	Med	0.28	4.3	0.00	Dec 9, 2024	Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamics 365 Integration: from n/a through 1.3.13.

CVE-2024-12201MedDec 12, 2024
WordPress
Hash Form
risk 0.28cvss 4.3epss 0.00
The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with…
CVE-2024-10583MedDec 12, 2024
WordPress
Popup Maker
risk 0.28cvss 5.4epss 0.00
The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_title’ parameter in all versions up to, and including, 1.20.2 due to insufficient input…
CVE-2024-12263MedDec 12, 2024
WordPress
Orbisius Child Theme Creator
risk 0.28cvss 4.3epss 0.00
The Child Theme Creator by Orbisius plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cloud_delete() and cloud_update() functions in all versions up to, and including, 1.5.5. This makes it possible for authenticated…
CVE-2024-12059MedDec 12, 2024
Elementinvader
Elementinvader Addons For Elementor
risk 0.28cvss 4.3epss 0.00
The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via the eli_option_value shortcode. This makes it possible for authenticated attackers, with Contributor-level access and…
CVE-2024-12526MedDec 12, 2024
Arena.im
Arena.im
risk 0.28cvss 4.3epss 0.00
The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4.1. This is due to missing or incorrect nonce validation on the 'albfre_user_action' AJAX action. This makes it possible…
CVE-2024-11709MedDec 12, 2024
WordPress
AI Post Generator | AutoWriter
risk 0.28cvss 4.3epss 0.00
The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ai_post_generator_delete_Post AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated…
CVE-2024-12341MedDec 12, 2024
WordPress
Custom Skins Contact Form 7
risk 0.28cvss 4.3epss 0.00
The Custom Skins Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf7cs_action_callback' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with…
CVE-2024-54269MedDec 11, 2024
WordPress
Notibar
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Ninja Team Notibar notibar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notibar: from n/a through <= 2.1.4.
CVE-2024-11868MedDec 10, 2024
WordPress
Learnpress
risk 0.28cvss 5.3epss 0.01
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This makes it possible for unauthenticated attackers to extract potentially…
CVE-2024-52385MedDec 9, 2024
WordPress
Ht Team Member
risk 0.28cvss 4.3epss 0.00
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpmart Team Member team-showcase-supreme.This issue affects Team Member: from n/a through <= 7.4.
CVE-2024-54227MedDec 9, 2024
WordPress
Min And Max Quantity For Woocommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Dotstore Minimum and Maximum Quantity for WooCommerce min-and-max-quantity-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimum and Maximum Quantity for WooCommerce: from n/a…
CVE-2024-53816MedDec 9, 2024
Themeum
Tutor Lms Elementor Addons
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Themeum Tutor LMS Elementor Addons tutor-lms-elementor-addons.This issue affects Tutor LMS Elementor Addons: from n/a through <= 2.1.5.
CVE-2024-53785MedDec 9, 2024
WordPress
Chatter
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1.
CVE-2023-50899MedDec 9, 2024
Multivendorx
Product Catalog Enquiry for WooCommerce
risk 0.28cvss 5.4epss 0.01
Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2.
CVE-2023-50877MedDec 9, 2024
WordPress
Woo Product Filter
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Filter by WBW: from n/a through 2.5.0.
CVE-2023-50876MedDec 9, 2024
Molongui
Molongui
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Molongui: from n/a through 4.7.3.
CVE-2023-49861MedDec 9, 2024
WordPress
Social Media Feather
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through <= 2.1.3.
CVE-2023-49859MedDec 9, 2024
WordPress
Login With Ajax
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login With Ajax: from n/a through <= 4.1.
CVE-2023-49858MedDec 9, 2024
WordPress
Custom Login
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Austin Custom Login custom-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login: from n/a through <= 4.1.0.
CVE-2023-49849MedDec 9, 2024
WordPress
Shortcoder
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in vaakash Shortcoder shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through <= 6.3.
CVE-2023-49835MedDec 9, 2024
Metaphorcreations
Post Duplicator
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31.
CVE-2023-49758MedDec 9, 2024
WordPress
Wp Booking System
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Roland Murg WP Booking System wp-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Booking System: from n/a through <= 2.0.19.2.
CVE-2023-49754MedDec 9, 2024
WordPress
Bulk Edit Post Titles
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through <= 5.0.0.
CVE-2023-49196MedDec 9, 2024
WordPress
Pagelayer
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Pagelayer Team PageLayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PageLayer: from n/a through 1.7.7.
CVE-2023-49156MedDec 9, 2024
Godaddy
Godaddy Email Marketing
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in GoDaddy GoDaddy Email Marketing godaddy-email-marketing-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDaddy Email Marketing: from n/a through <= 1.4.3.
CVE-2023-48740MedDec 9, 2024
Easysocialfeed
Easy Social Feed
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Sajid Javed Easy Social Feed easy-facebook-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Feed: from n/a through <= 6.5.1.
CVE-2023-48332MedDec 9, 2024
WordPress
Wp Mail Bank
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Varun Sharma Mail Bank - #1 Mail SMTP Plugin for WordPress wp-mail-bank allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mail Bank - #1 Mail SMTP Plugin for WordPress: from n/a through <= 4.0.14.
CVE-2023-48277MedDec 9, 2024
WordPress
Super Progressive Web Apps
risk 0.28cvss 4.3epss 0.01
Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through <= 2.2.21.
CVE-2023-47871MedDec 9, 2024
WordPress
Contact Form To Any API
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form to Any API: from n/a through 1.1.6.
CVE-2023-47869MedDec 9, 2024
Gvectors
Wpforo Forum
risk 0.28cvss 4.3epss 0.00
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affects wpForo Forum: from n/a through 2.2.5.
CVE-2023-47849MedDec 9, 2024
WordPress
Blossomthemes Email Newsletter
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes Email Newsletter: from n/a through <= 2.2.4.
CVE-2023-47841MedDec 9, 2024
WordPress
Analytify
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through 5.1.1.
CVE-2023-47838MedDec 9, 2024
WordPress
Conditional Fields for Contact Form 7
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Jules Colle Conditional Fields for Contact Form 7 cf7-conditional-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conditional Fields for Contact Form 7: from n/a through <= 2.4.1.
CVE-2023-47820MedDec 9, 2024
WordPress
Wp Like Button
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Like Button: from n/a through 1.7.0.
CVE-2023-47793MedDec 9, 2024
WordPress
Acme Fix Images
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Acme Themes Acme Fix Images acme-fix-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acme Fix Images: from n/a through <= 1.0.0.
CVE-2023-47780MedDec 9, 2024
WordPress
Easyazon
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in flowdee EasyAzon easyazon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyAzon: from n/a through <= 5.1.0.
CVE-2023-47776MedDec 9, 2024
WordPress
Miniorange OTP Verification
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects miniorange otp verification: from n/a through <= 4.2.1.
CVE-2023-47763MedDec 9, 2024
WordPress
Wp Custom Admin Interface
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through <= 7.31.
CVE-2023-47762MedDec 9, 2024
Wpdeveloper
Betterdocs
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterDocs: from n/a through <= 2.5.2.
CVE-2023-47761MedDec 9, 2024
WordPress
Simple 301 Redirects by BetterLinks
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through <= 2.0.7.
CVE-2023-47760MedDec 9, 2024
Wpdeveloper
Essential Blocks
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.
CVE-2023-47756MedDec 9, 2024
WordPress
Welcome Email Editor
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcome Email Editor: from n/a through 5.0.6.
CVE-2023-32126MedDec 9, 2024
WordPress
Salert
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: from n/a through 1.2.1.
CVE-2023-31073MedDec 9, 2024
WordPress
Display custom fields in the frontend
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display custom fields in the frontend – Post and User Profile…
CVE-2023-30783MedDec 9, 2024
WordPress
Smart Woocommerce Search
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0.
CVE-2023-30748MedDec 9, 2024
Easy Appointments
Easy Appointments
risk 0.28cvss 4.3epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7.
CVE-2023-30486MedDec 9, 2024
WordPress
Square
risk 0.28cvss 4.3epss 0.01
Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0.
CVE-2023-30476MedDec 9, 2024
WordPress
Blogger Buzz
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Sparkle Themes Blogger Buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blogger Buzz: from n/a through 1.2.2.
CVE-2023-29431MedDec 9, 2024
WordPress
qTranslate X Cleanup and WPML Import
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through 3.0.1.
CVE-2023-29422MedDec 9, 2024
AlexaCRM
Dynamics 365 Integration
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamics 365 Integration: from n/a through 1.3.13.

Page 686 of 799