Total
5353 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-7894 | 1 Andreiigna | 1 If Menu | 2024-12-10 | 5.3 Medium |
| The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check on the 'actions' function in versions up to, and including, 0.19.1. This makes it possible for unauthenticated attackers to modify delete or modify the license key. | ||||
| CVE-2024-47581 | 2024-12-10 | 4.3 Medium | ||
| SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted. | ||||
| CVE-2023-50887 | 1 Userfeedback | 1 Userfeedback | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in UserFeedback Team User Feedback allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Feedback: from n/a through 1.0.10. | ||||
| CVE-2023-47764 | 1 Metaphorcreations | 1 Ditty | 2024-12-09 | 6.5 Medium |
| Missing Authorization vulnerability in Metaphor Creations Ditty allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ditty: from n/a through 3.1.24. | ||||
| CVE-2023-47763 | 2024-12-09 | 4.3 Medium | ||
| Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.31. | ||||
| CVE-2023-47761 | 2024-12-09 | 4.3 Medium | ||
| Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through 2.0.7. | ||||
| CVE-2023-30783 | 2024-12-09 | 4.3 Medium | ||
| Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0. | ||||
| CVE-2023-30488 | 1 Essentialplugin | 1 Featured Post Creative | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through 1.2.7. | ||||
| CVE-2023-30479 | 1 Stamped | 1 Stamped | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in Stamped.io Stamped.io Product Reviews & UGC for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stamped.io Product Reviews & UGC for WooCommerce: from n/a through 2.3.2. | ||||
| CVE-2023-29431 | 2024-12-09 | 4.3 Medium | ||
| Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through 3.0.1. | ||||
| CVE-2023-29173 | 1 Awesometogi | 1 Product Category Tree | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in AWESOME TOGI Product Category Tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Category Tree: from n/a through 2.5. | ||||
| CVE-2023-28536 | 1 Acato | 1 Branded Social Images | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in Acato Branded Social Images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Branded Social Images: from n/a through 1.1.0. | ||||
| CVE-2023-28532 | 2024-12-09 | 4.3 Medium | ||
| Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Directory: from n/a through 1.0.5. | ||||
| CVE-2023-28168 | 2024-12-09 | 3.7 Low | ||
| Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Console: from n/a through 0.3.9. | ||||
| CVE-2023-27626 | 1 Urosevic | 1 Stock Ticker | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Ticker: from n/a through 3.23.0. | ||||
| CVE-2023-26522 | 1 Onewebsite | 1 Wp Repost | 2024-12-09 | 6.5 Medium |
| Missing Authorization vulnerability in OneWebsite WP Repost allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Repost: from n/a through 0.1. | ||||
| CVE-2023-26520 | 1 Advanced Text Widget Project | 1 Advanced Text Widget | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2. | ||||
| CVE-2023-25714 | 1 Fullworksplugins | 1 Quick Paypal Payments | 2024-12-09 | 7.5 High |
| Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 5.7.25. | ||||
| CVE-2023-25703 | 1 Essentialplugin | 1 Meta Slider And Carousel With Lightbox | 2024-12-09 | 5.3 Medium |
| Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta slider and carousel with lightbox: from n/a through 1.6.2. | ||||
| CVE-2023-25035 | 1 Fullworksplugins | 1 Quick Contact Form | 2024-12-09 | 6.5 Medium |
| Missing Authorization vulnerability in Fullworks Quick Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Contact Form : from n/a through 8.0.3.1. | ||||