CyberAlerts

CVE-2023-47869

WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability

Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affects wpForo Forum: from n/a through 2.2.5.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47849

WordPress BlossomThemes Email Newsletter plugin <= 2.2.4 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in blossomthemes BlossomThemes Email Newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes Email Newsletter: from n/a through 2.2.4.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47847

WordPress PayTR Taksit Tablosu plugin <= 1.3.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PayTR Taksit Tablosu: from n/a through 1.3.1.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47841

WordPress Analytify plugin <= 5.1.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through 5.1.1.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47838

WordPress Conditional Fields for Contact Form 7 plugin <= 2.4.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Jules Colle Conditional Fields for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conditional Fields for Contact Form 7: from n/a through 2.4.1.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47836

WordPress WP Meta and Date Remover plugin <= 2.3.0 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Meta and Date Remover: from n/a through 2.3.0.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47832

WordPress SearchIQ plugin <= 4.4 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in searchiq SearchIQ allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through 4.4.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47830

WordPress Live Preview for Contact Form 7 plugin <= 1.2.0 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Addons for Contact Form 7 Live Preview for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Preview for Contact Form 7: from n/a through 1.2.0.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47826

WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.3.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47823

WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft: from n/a through 1.2.7.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: