Skip to content
OpenAdvisories

Archive

9 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /9 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

212 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-47805

    WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.

    Arraytics WPCafe
  • Medium 4.3
    CVE-2023-47820

    WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Like Button: from n/a through 1.7.0.

    CRUDLab WP Like Button
  • Medium 5.4
    CVE-2023-47822

    WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/…

    SONAAR MUSIC MP3 Audio Player for Music, Radio & Podcast by Sonaar
  • Medium 5.3
    CVE-2023-47823

    WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft: from n/a through 1.2.7.

    nCrafts FormCraft Web / CMS
  • Medium 6.5
    CVE-2023-47826

    WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.3.

    nicheaddons Restaurant & Cafe Addon for Elementor
  • Medium 5.4
    CVE-2023-47830

    WordPress Live Preview for Contact Form 7 plugin <= 1.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Addons for Contact Form 7 Live Preview for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Preview for Contact Form 7: from n/a through 1.2.0.

    Addons for Contact Form 7 Live Preview for Contact Form 7
  • Medium 5.3
    CVE-2023-47832

    WordPress SearchIQ plugin <= 4.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through <= 4.4.

    SearchIQ SearchIQ
  • Medium 5.4
    CVE-2023-47836

    WordPress WP Meta and Date Remover plugin <= 2.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in prasadkirpekar WP Meta and Date Remover wp-meta-and-date-remover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Meta and Date Remover: from n/a through <= 2.3.0.

    Prasad Kirpekar WP Meta and Date Remover
  • Medium 4.3
    CVE-2023-47838

    WordPress Conditional Fields for Contact Form 7 plugin <= 2.4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jules Colle Conditional Fields for Contact Form 7 cf7-conditional-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conditional Fields for Contact Form 7: from n/a through …

    Jules Colle Conditional Fields for Contact Form 7
  • Medium 4.3
    CVE-2023-47841

    WordPress Analytify plugin <= 5.1.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through 5.1.1.

    Analytify Analytify
  • Medium 5.3
    CVE-2023-47847

    WordPress PayTR Taksit Tablosu plugin <= 1.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PayTR Taksit Tablosu: from n/a through 1.3.1.

    PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu
  • Medium 4.3
    CVE-2023-47869

    WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This issue affects wpForo Forum: from n/a through 2.2.5.

    gVectors Team wpForo Forum
  • Medium 4.3
    CVE-2023-47849

    WordPress BlossomThemes Email Newsletter plugin <= 2.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes Email Newsletter: from n/a through <= …

    Blossom Themes BlossomThemes Email Newsletter
  • Medium 4.3
    CVE-2023-47871

    WordPress Contact Form to Any API plugin <= 1.1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form to Any API: from n/a through 1.1.6.

    IT Path Solutions Contact Form to Any API
  • Medium 6.5
    CVE-2023-48274

    WordPress WCMultiShipping plugin <= 2.3.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCMultiShipping: from n/a through 2.3.5.

    Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping
  • Medium 5.4
    CVE-2023-48324

    WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability

    Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through <= 6.1.4.

    Awesome Support Awesome Support
  • Medium 5.4
    CVE-2023-48287

    WordPress TextMe SMS plugin <= 1.9.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Matat Technologies TextMe SMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through 1.9.0.

    Matat Technologies TextMe SMS
  • Medium 4.3
    CVE-2023-48332

    WordPress Mail Bank – #1 Mail SMTP Plugin for WordPress plugin <= 4.0.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Varun Sharma Mail Bank - #1 Mail SMTP Plugin for WordPress wp-mail-bank allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mail Bank - #1 Mail SMTP Plugin for WordPress: from n/a t…

    Varun Sharma Mail Bank - #1 Mail SMTP Plugin for WordPress Web / CMS
  • Medium 4.3
    CVE-2023-48740

    WordPress Easy Social Feed plugin <= 6.5.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Sajid Javed Easy Social Feed easy-facebook-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Social Feed: from n/a through <= 6.5.1.

    Sajid Javed Easy Social Feed
  • Medium 5.3
    CVE-2023-48750

    WordPress Void Elementor Post Grid Addon for Elementor Page builder plugin <= 2.1.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in voidthemes Void Elementor Post Grid Addon for Elementor Page builder void-elementor-post-grid-addon-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vo…

    voidthemes Void Elementor Post Grid Addon for Elementor Page builder
  • Medium 5.4
    CVE-2023-48774

    WordPress IdeaPush plugin < 8.58 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through n/a.

    Martin Gibson IdeaPush
  • Medium 5.4
    CVE-2023-48776

    WordPress canvasio3D Light plugin <= 2.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in virtuellwerk canvasio3D Light canvasio3d-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects canvasio3D Light: from n/a through <= 2.5.0.

    virtuellwerk canvasio3D Light
  • Medium 6.5
    CVE-2023-48779

    WordPress 360 Javascript Viewer plugin <= 1.7.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in 3DWeb 360 Javascript Viewer 360deg-javascript-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 360 Javascript Viewer: from n/a through <= 1.7.11.

    3DWeb 360 Javascript Viewer
  • Medium 5.3
    CVE-2023-49154

    WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Wow-Company Button Generator – easily Button Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8.

    Wow-Company Button Generator – easily Button Builder
  • Medium 4.3
    CVE-2023-49156

    WordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in GoDaddy GoDaddy Email Marketing godaddy-email-marketing-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDaddy Email Marketing: from n/a through <= 1.4.3.

    GoDaddy GoDaddy Email Marketing
  • Medium 6.5
    CVE-2023-49167

    WordPress Database for CF7 plugin <= 1.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in code4life Database for CF7 database-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database for CF7: from n/a through <= 1.2.4.

    code4life Database for CF7
  • Medium 5.3
    CVE-2023-49192

    WordPress Enhanced Text Widget plugin <= 1.6.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in cl272 Enhanced Text Widget enhanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Text Widget: from n/a through <= 1.6.3.

    cl272 Enhanced Text Widget
  • Medium 5.3
    CVE-2023-49193

    WordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hubbub Lite: from n/a through <= 1.30.0.

    NerdPress Hubbub Lite
  • Medium 5.3
    CVE-2023-49194

    WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify (Dropshipping WooCommerce) importify allows Retrieve Embedded Sensitive Data.This issue affects Importify (Dropshipping WooCommerce): from n/a through <= 1.0.4.

    importify Importify (Dropshipping WooCommerce) Web / CMS
  • Medium 4.3
    CVE-2023-49196

    WordPress Pagelayer plugin <= 1.7.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Pagelayer Team PageLayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PageLayer: from n/a through 1.7.7.

    Pagelayer Team PageLayer
  • Medium 5.4
    CVE-2023-49756

    WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability

    Missing Authorization vulnerability in Arraytics Eventin wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventin: from n/a through <= 3.3.52.

    Arraytics Eventin
  • Medium 4.3
    CVE-2023-49754

    WordPress Bulk Edit Post Titles plugin <= 5.0.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through <= 5.0.0.

    Yogesh Pawar Bulk Edit Post Titles
  • Medium 5.4
    CVE-2023-49755

    WordPress Elementor Timeline Widget plugin <= 2.2 - Notice Dismissal Vulnerability

    Missing Authorization vulnerability in B.M. Rafiul Alam Elementor Timeline Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Timeline Widget: from n/a through 2.2.

    B.M. Rafiul Alam Elementor Timeline Widget
  • Medium 5.4
    CVE-2023-49757

    WordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability

    Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through <= 6.1.10.

    Awesome Support Awesome Support
  • Medium 4.3
    CVE-2023-49758

    WordPress WP Booking System plugin <= 2.0.19.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Roland Murg WP Booking System wp-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Booking System: from n/a through <= 2.0.19.2.

    Roland Murg WP Booking System
  • Medium 5.3
    CVE-2023-49818

    WordPress Webflow Pages plugin <= 1.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow Pages: from n/a through 1.0.8.

    Webflow Webflow Pages
  • Medium 4.3
    CVE-2023-49861

    WordPress Social Media Feather plugin <= 2.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through <= 2.1.3.

    Socialmediafeather Social Media Feather
  • Medium 5.3
    CVE-2023-49832

    WordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through <= 6.10.2.

    Gemini Labs Site Reviews
  • Medium 4.3
    CVE-2023-49859

    WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login With Ajax: from n/a through <= 4.1.

    Marcus (aka @msykes) Login With Ajax
  • Medium 4.3
    CVE-2023-49835

    WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31.

    Metaphor Creations Post Duplicator