CyberAlerts

CVE-2023-47760

WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0.

CVSS: MEDIUM (4.3)

EPSS Score: 0.05%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47756

WordPress Welcome Email Editor plugin <= 5.0.6 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcome Email Editor: from n/a through 5.0.6.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47698

WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Artisan Workshop Japanized For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Japanized For WooCommerce: from n/a through 2.6.4.

CVSS: HIGH (8.6)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-47694

WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mini Cart Drawer For WooCommerce: from n/a through 4.0.0.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-41953

WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-32299

WordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in anzia Ni WooCommerce Sales Report allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Sales Report: from n/a through 3.7.3.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-32293

WordPress WRC Pricing Tables plugin <= 2.3.7 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WRC Pricing Tables: from n/a through 2.3.7.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-32126

WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: from n/a through 1.2.1.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-32117

WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability

Description: Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99.

CVSS: CRITICAL (9.8)

EPSS Score: 0.25%

Source: CVE

December 10th, 2024 (4 months ago)

CVE-2023-32094

WordPress Extended Post Status plugin <= 1.0.19 - Broken Access Control vulnerability

Description: Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extended Post Status: from n/a through 1.0.19.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE

December 10th, 2024 (4 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: