CyberAlerts

CVE-2023-49861

WordPress Social Media Feather plugin <= 2.1.3 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in socialmediafeather Social Media Feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through 2.1.3.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49859

WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Pixelite Login With Ajax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login With Ajax: from n/a through 4.1.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49858

WordPress Custom Login plugin <= 4.1.0 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Austin Passy Custom Login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login: from n/a through 4.1.0.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49857

WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Awesome Support Team Awesome Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through 6.1.7.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49856

WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability

Description: Missing Authorization vulnerability in RedNao Smart Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through 2.6.84.

CVSS: HIGH (8.1)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49851

WordPress Square Thumbnails plugin <= 1.1.1 - Broken Access Control + CSRF vulnerability

Description: Missing Authorization vulnerability in ILMDESIGNS Square Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square Thumbnails: from n/a through 1.1.1.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49850

WordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through 2.7.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49849

WordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Aakash Chakravarthy Shortcoder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcoder: from n/a through 6.3.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49848

WordPress Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy plugin <= 2.1.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in wooproductimporter Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through 2.1.1.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-49845

WordPress Redirects plugin <= 1.2.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Loud Dog Redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirects: from n/a through 1.2.1.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: