Skip to content
OpenAdvisories

Archive

12 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /12 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

90 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-4414

    Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass

    The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.5. This is due to missing or incorrect nonce validation on the wcal_preview_emails() function. This makes it possibl…

    Tyche Softwares Abandoned Cart Lite for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2021-4415

    Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass

    The Sunshine Photo Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.28 This is due to missing or incorrect nonce validation on the sunshine_products_quicksave_post() function. This makes it possible f…

    sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers Web / CMS
  • Medium 4.3
    CVE-2021-4413

    Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass

    The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticat…

    Narinder Singh Process Steps Template Designer Web / CMS
  • Medium 4.3
    CVE-2021-4412

    WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass

    The WP Prayer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.5. This is due to missing or incorrect nonce validation on the save() and export() functions. This makes it possible for unauthenticated attac…

    abrg WP Prayer Web / CMS
  • Medium 4.3
    CVE-2021-4411

    WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass

    The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the wpep_download_transaction_in_excel() function. This mak…

    Saad Iqbal WP Easy Pay – Payment and Donation Form Builder for Square Web / CMS
  • Medium 4.3
    CVE-2021-4410

    Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypass

    The Qtranslate Slug plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.18. This is due to missing or incorrect nonce validation on the save_postdata() function. This makes it possible for unauthenticated att…

    carlos_a_sanz Qtranslate Slug Web / CMS
  • Medium 4.3
    CVE-2021-4409

    WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass

    The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the etcpf_delete_feed() function. This makes it possible for una…

    purpleturtlepro Etsy Integration For WooCommerce Web / CMS
  • Medium 4.3
    CVE-2021-4408

    DW Question & Answer <= 1.5.8 - Cross-Site Request Forgery Bypass

    The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce validation on the update_answer() function. This makes it possible for unauthenticated…

    designwall DW Question & Answer Web / CMS
  • Medium 4.3
    CVE-2020-36750

    EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass

    The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1. This is due to missing or incorrect nonce validation on the ewww_ngg_bulk_init() function. This makes it possible for unauthenti…

    nosilver4u EWWW Image Optimizer Web / CMS
  • Medium 4.3
    CVE-2021-4407

    Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypass

    The Custom Banners plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.2 This is due to missing or incorrect nonce validation on the saveCustomFields() function. This makes it possible for unauthenticated att…

    ghuger Custom Banners Web / CMS