VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

39,872 total · sorted by risk
  • CVE-2023-49844MedDec 18, 2023
    Reviewsignal
    Wpperformancetester
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Kevin Ohashi WPPerformanceTester.This issue affects WPPerformanceTester: from n/a through 2.0.0.

  • CVE-2023-49840MedDec 18, 2023
    Palscode
    Multi Currency For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Currency For WooCommerce: from n/a through 1.5.5.

  • CVE-2023-50372MedDec 18, 2023
    Wpgogo
    Custom Post Type Page Template
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Post Type Page Template.This issue affects Custom Post Type Page Template: from n/a through 1.1.

  • CVE-2023-49816MedDec 17, 2023
    Whereyoursolutionis
    Fix My Feed Rss Repair
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Innovative Solutions Fix My Feed RSS Repair.This issue affects Fix My Feed RSS Repair: from n/a through 1.4.

  • CVE-2023-49775MedDec 17, 2023
    Deniskobozev
    CSV Importer
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Denis Kobozev CSV Importer.This issue affects CSV Importer: from n/a through 0.3.8.

  • CVE-2023-49769MedDec 17, 2023
    Softlabbd
    Integrate Google Drive
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4.

  • CVE-2023-49751MedDec 17, 2023
    Getbutterfly
    Block For Font Awesome
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu Block for Font Awesome.This issue affects Block for Font Awesome: from n/a through 1.4.0.

  • CVE-2023-24380MedDec 17, 2023
    Webbjocke
    Simple Wp Sitemap
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Webbjocke Simple Wp Sitemap.This issue affects Simple Wp Sitemap: from n/a through 1.2.1.

  • CVE-2023-49749MedDec 15, 2023
    Suretriggers
    Suretriggers
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in SureTriggers SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything!.This issue affects SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything!: from n/a through 1.0.23.

  • CVE-2023-49197MedDec 15, 2023
    Apasionados
    Dofollow Case By Case
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2.

  • CVE-2023-5714MedDec 7, 2023
    WordPress
    System Dashboard
    risk 0.28cvss 4.3epss 0.00

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_db_specs() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with…

  • CVE-2023-5713MedDec 7, 2023
    WordPress
    System Dashboard
    risk 0.28cvss 4.3epss 0.00

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_option_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers,…

  • CVE-2023-5712MedDec 7, 2023
    WordPress
    System Dashboard
    risk 0.28cvss 4.3epss 0.00

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_global_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers,…

  • CVE-2023-5711MedDec 7, 2023
    WordPress
    System Dashboard
    risk 0.28cvss 4.3epss 0.00

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_php_info() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with…

  • CVE-2023-5710MedDec 7, 2023
    WordPress
    System Dashboard
    risk 0.28cvss 4.3epss 0.00

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_constants() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with…

  • CVE-2023-5803MedNov 30, 2023
    WordPress
    Business Directory Plugin
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a…

  • CVE-2023-48328MedNov 30, 2023
    Imagely
    Nextgen Gallery
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin – NextGEN Gallery: from n/a through 3.37.

  • CVE-2023-37890MedNov 30, 2023
    WordPress
    Kb Support
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by ACLs. Users with a role as low as a subscriber can view other customers.This issue affects KB Support – WordPress…

  • CVE-2023-40600MedNov 30, 2023
    Ewww
    Image Optimizer
    risk 0.28cvss 5.3epss 0.02

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.

  • CVE-2023-48281MedNov 30, 2023
    Superblogme
    Broken Link Checker For Youtube
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Super Blog Me Broken Link Checker for YouTube allows Cross Site Request Forgery.This issue affects Broken Link Checker for YouTube: from n/a through 1.3.

  • CVE-2023-48279MedNov 30, 2023
    Seraphinite Solutions
    Seraphinite Post .DOCX Source
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.

  • CVE-2023-47645MedNov 30, 2023
    Metagauss
    Registrationmagic
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User…

  • CVE-2023-36685MedNov 30, 2023
    Brainstormforce
    Cartflows
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC CartFlows Pro allows Cross Site Request Forgery.This issue affects CartFlows Pro: from n/a through 1.11.12.

  • CVE-2023-48331MedNov 30, 2023
    WordPress
    MyBookTable Bookstore
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Stormhill Media MyBookTable Bookstore by Stormhill Media allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore by Stormhill Media: from n/a through 3.3.4.

  • CVE-2023-48323MedNov 30, 2023
    WordPress
    Awesome Support
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4.

  • CVE-2023-48284MedNov 30, 2023
    Webtoffee
    Decorator
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator – WooCommerce Email Customizer allows Cross Site Request Forgery.This issue affects Decorator – WooCommerce Email Customizer: from n/a through 1.2.7.

  • CVE-2023-48283MedNov 30, 2023
    Presstigers
    Simple Testimonials Showcase
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5.

  • CVE-2023-5772MedNov 30, 2023
    WordPress
    Debug Log Manager
    risk 0.28cvss 4.3epss 0.00

    The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the clear_log() function. This makes it possible for unauthenticated attackers to clear the…

  • CVE-2023-6226MedNov 28, 2023
    WordPress
    Shortcodes Ultimate
    risk 0.28cvss 4.3epss 0.01

    The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.13.3 via the su_meta shortcode due to missing validation on the user controlled keys 'key' and 'post_id'. This makes it…

  • CVE-2023-5737MedNov 27, 2023
    WordPress
    Backup Migration
    risk 0.28cvss 4.3epss 0.00

    The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings.

  • CVE-2023-5525MedNov 27, 2023
    WordPress
    Limit Login Attempts Reloaded
    risk 0.28cvss 4.3epss 0.00

    The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a valid nonce to toggle the auto-update status of the plugin.

  • CVE-2023-4297MedNov 27, 2023
    WordPress
    Simple File List
    risk 0.28cvss 4.3epss 0.01

    The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.

  • CVE-2023-23978MedNov 23, 2023
    Switchwp
    Wp Client Reports
    risk 0.28cvss 4.3epss 0.01

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin <= 1.0.16 versions.

  • CVE-2023-47825MedNov 22, 2023
    Wpvnteam
    Wp Extra
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra plugin <= 6.4 versions.

  • CVE-2023-47819MedNov 22, 2023
    Dangngocbinh
    Easy Call Now By Thikshare
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Dang Ngoc Binh Easy Call Now by ThikShare plugin <= 1.1.0 versions.

  • CVE-2023-47792MedNov 22, 2023
    Infiniteuploads
    Big File Uploads
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Infinite Uploads Big File Uploads – Increase Maximum File Upload Size plugin <= 2.1.1 versions.

  • CVE-2023-47791MedNov 22, 2023
    Leadster
    Leadster
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Leadster plugin <= 1.1.2 versions.

  • CVE-2023-47775MedNov 22, 2023
    Gvectors
    Wpdiscuz
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions.

  • CVE-2023-47765MedNov 22, 2023
    WordPress
    Patron Button and Widgets for Patreon
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.9 versions.

  • CVE-2023-25987MedNov 22, 2023
    Urosevic
    My Youtube Channel
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Aleksandar Urošević My YouTube Channel plugin <= 3.23.3 versions.

  • CVE-2023-25986MedNov 22, 2023
    WordPress
    PayGreen
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in WattIsIt PayGreen – Ancienne version plugin <= 4.10.2 versions.

  • CVE-2023-5537MedNov 22, 2023
    WordPress
    Delete Usermeta
    risk 0.28cvss 4.3epss 0.00

    The Delete Usermeta plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing nonce validation on the delumet_options_page() function. This makes it possible for unauthenticated attackers to remove user meta…

  • CVE-2023-27633MedNov 22, 2023
    Pixelgrade
    Customify
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Customify – Intuitive Website Styling plugin <= 2.10.4 versions.

  • CVE-2023-27461MedNov 22, 2023
    Yoohooplugins
    When Last Login
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Yoohoo Plugins When Last Login plugin <= 1.2.1 versions.

  • CVE-2023-27458MedNov 22, 2023
    Wpstream
    Wpstream
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in wpstream WpStream plugin <= 4.4.10 versions.

  • CVE-2023-27457MedNov 22, 2023
    Passionate Brains
    Add Expires Headers & Optimized Minify
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Passionate Brains Add Expires Headers & Optimized Minify plugin <= 2.7 versions.

  • CVE-2023-27446MedNov 22, 2023
    Fluenx
    Deepl API Translation
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Fluenx DeepL API translation plugin <= 2.1.4 versions.

  • CVE-2023-27444MedNov 22, 2023
    Perfops
    Decalog
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Pierre Lannoy / PerfOps One DecaLog plugin <= 3.7.0 versions.

  • CVE-2023-28749MedNov 22, 2023
    CreativeMindsSolutions
    CM On Demand Search And Replace
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

  • CVE-2023-5776MedNov 21, 2023
    WordPress
    Post Meta Data Manager
    risk 0.28cvss 4.3epss 0.00

    The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the pmdm_wp_ajax_delete_meta, pmdm_wp_delete_user_meta, and pmdm_wp_delete_user_meta functions.…

Page 703 of 798