Skip to content
OpenAdvisories

Archive

13 December 2024

Vulnerabilities first published on this day (UTC), newest first.

← November 2024 2024 / December /13 January 2025 →
  1. 112
  2. 2199
  3. 383
  4. 4138
  5. 5112
  6. 6170
  7. 732
  8. 87
  9. 9288
  10. 10339
  11. 11157
  12. 12150
  13. 13297
  14. 1449
  15. 159
  16. 16208
  17. 1785
  18. 18156
  19. 1994
  20. 2087
  21. 2130
  22. 2216
  23. 2333
  24. 2460
  25. 2528
  26. 2666
  27. 27284
  28. 2850
  29. 2969
  30. 3059
  31. 31105
All Critical High Medium Low Exploited only Public exploit

191 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-54244

    WordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through <= 1.3.

    Think201 Easy Replace
  • Medium 6.5
    CVE-2024-54243

    WordPress Echoza plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through <= 0.1.1.

    Think201 Echoza
  • Medium 6.5
    CVE-2024-54241

    WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability

    Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elite Notification – Sales Popup, Social P…

    Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification Web / CMS
  • Medium 6.5
    CVE-2024-54242

    WordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through <= 1.3.

    Appsbd Simple Notification
  • Medium 5.3
    CVE-2023-44149

    WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through <= 3.8.2.2.

    BeRocket Brands for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2023-44147

    WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comment Blacklist Updater: from n/a through <= 1.1.0.

    apasionados Comment Blacklist Updater
  • Medium 5.4
    CVE-2023-44142

    WordPress Inactive Logout plugin <= 3.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Deepen Bajracharya Inactive Logout inactive-logout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Inactive Logout: from n/a through <= 3.2.2.

    Deepen Bajracharya Inactive Logout
  • Medium 5.3
    CVE-2023-41952

    WordPress Fluent Forms plugin <= 5.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 5.0.8.

    Contact Form - WPManageNinja FluentForm
  • Medium 4.3
    CVE-2023-41951

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14.

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 5.3
    CVE-2023-41875

    WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through 1.2.6.

    wpdirectorykit.com WP Directory Kit
  • Medium 4.3
    CVE-2023-41873

    WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SAML SP Single Sign On: from n/a through 5.0.4.

    miniOrange SAML SP Single Sign On
  • Medium 4.3
    CVE-2023-41870

    WordPress WP Crowdfunding plugin <= 2.1.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5.

    Themeum WP Crowdfunding
  • Medium 4.3
    CVE-2023-41869

    WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.4.

    Alex Volkov WP Accessibility Helper (WAH)
  • Medium 4.3
    CVE-2023-41866

    WordPress Automatic YouTube Gallery plugin <= 2.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic YouTube Gallery: from n/a through 2.3.3.

    Team Plugins360 Automatic YouTube Gallery
  • Medium 4.3
    CVE-2023-41865

    WordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro: from n/a through 4.8.6.

    bqworks Slider Pro
  • Medium 5.3
    CVE-2023-41862

    WordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability

    Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0.

    Guido VS Contact Form
  • Medium 5.4
    CVE-2023-41857

    WordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ClickToTweet.com Click To Tweet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Click To Tweet: from n/a through 2.0.14.

    ClickToTweet.com Click To Tweet
  • Medium 5.3
    CVE-2023-41849

    WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.

    WP Happy Coders Posts Like Dislike
  • Medium 5.3
    CVE-2023-41803

    WordPress BitPay Checkout for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0.

    BitPay BitPay Checkout for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2023-41848

    WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.

    Majeed Raza Carousel Slider
  • Medium 4.3
    CVE-2023-41802

    WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Socializer: from n/a through 7.13.54.

    Team Heateor Super Socializer
  • Medium 5.3
    CVE-2023-41690

    WordPress WiserNotify Social Proof plugin <= 2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify Social Proof: from n/a through 2.5.

    Wiser Notify WiserNotify Social Proof
  • Medium 4.3
    CVE-2023-41689

    WordPress Post to Google My Business (Google Business Profile) plugin <= 3.1.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Koen Reus Post to Google My Business (Google Business Profile) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post to Google My Business (Google Business Profile): from n/a thr…

    Koen Reus Post to Google My Business (Google Business Profile)
  • Medium 6.5
    CVE-2023-41686

    WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support System: from n/a through 1.2.2.

    ilGhera Woocommerce Support System Web / CMS
  • Medium 5.4
    CVE-2023-41688

    WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5.

    Mad Fish Digital Bulk NoIndex & NoFollow Toolkit
  • Medium 5.4
    CVE-2023-41671

    WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability

    Missing Authorization vulnerability in tychesoftwares Abandoned Cart Lite for WooCommerce woocommerce-abandoned-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Abandoned Cart Lite for WooCommerce: from n/a throu…

    Tyche Softwares Abandoned Cart Lite for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2023-41683

    WordPress TelSender plugin <= 1.14.11 - Broken Access Control + CSRF vulnerability

    Missing Authorization vulnerability in Pechenki TelSender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TelSender: from n/a through 1.14.11.

    pechenki TelSender
  • Medium 6.5
    CVE-2023-41664

    WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4.

    Alpha BPO Easy Newsletter Signups
  • Medium 5.3
    CVE-2023-41133

    WordPress Secure Admin IP plugin <= 2.0 - IP Spoofing vulnerability

    Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionality Bypass.This issue affects Secure Admin IP: from n/a through 2.0.

    Michal Novák Secure Admin IP
  • Medium 6.5
    CVE-2023-41649

    WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ovic Team Ovic Product Bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovic Product Bundle: from n/a through 1.1.2.

    Ovic Team Ovic Product Bundle
  • Medium 4.3
    CVE-2023-41132

    WordPress Category Slider for WooCommerce plugin <= 1.4.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Category Slider for WooCommerce: from n/a through 1.4.15.

    ShapedPlugin Category Slider for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2023-40678

    WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through <= 117.

    Andrew Fiebert Simple URLs
  • Medium 4.3
    CVE-2023-40670

    WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.17.

    ReviewX ReviewX
  • Medium 4.3
    CVE-2023-40334

    WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HUSKY: from n/a through <= 1.3.4.2.

    RealMag777 HUSKY
  • Medium 4.3
    CVE-2023-40331

    WordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion Slider: from n/a through 1.9.6.

    bqworks Accordion Slider
  • Medium 4.3
    CVE-2023-40213

    WordPress Justified Gallery plugin <= 1.7.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justified Gallery: from n/a through 1.7.3.

    Mateusz Czardybon Justified Gallery
  • Medium 4.3
    CVE-2023-40203

    WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control

    Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4.

    mailmunch MailChimp Forms by MailMunch
  • Medium 5.4
    CVE-2023-40011

    WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability

    Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42.

    StylemixThemes Cost Calculator Builder
  • Medium 5.3
    CVE-2023-40005

    WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control

    Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through <= 3.1.5.

    Syed Balkhi Easy Digital Downloads
  • Medium 6.5
    CVE-2023-40003

    WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Project Manager: from n/a through <= 2.6.7.

    wedevs WP Project Manager