CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2023-40011	WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-40005	WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control Description: Missing Authorization vulnerability in Easy Digital Downloads Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.1.5. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-40003	WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in weDevs WP Project Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Project Manager: from n/a through 2.6.7. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-40001	WordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iThemes Sync: from n/a through 2.1.13. CVSS: MEDIUM (4.3) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-39997	WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-39996	WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control Description: Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion and Accordion Slider: from n/a through 1.2.4. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-39995	WordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio and Projects: from n/a through 1.3.7. CVSS: MEDIUM (4.3) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-39305	WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in YetAnotherStarsRating.com Yet Another Stars Rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through 3.4.3. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-38514	WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.5.7. CVSS: MEDIUM (4.3) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)
CVE-2023-38483	WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through 1.1.4. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE December 14th, 2024 (6 months ago)