Skip to content
OpenAdvisories

Archive

2 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /2 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

239 results · Feed

  • Medium 6.5
    CVE-2023-47180

    WordPress Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin <= 2.16.0 - Arbitrary Content Deletion vulnerability

    Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale Lite: from n/a through 2.16.0.

    XLPlugins Finale Lite
  • Medium 6.5
    CVE-2023-46644

    WordPress WordPress CTA plugin <= 1.5.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP CTA PRO WordPress CTA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress CTA: from n/a through 1.5.8.

    WP CTA PRO WordPress CTA Web / CMS
  • High 8.8
    CVE-2023-47179 Public exploit

    WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability

    Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through <= 2.4.6.

    mdalabar WooODT Lite
  • Medium 5.3
    CVE-2023-46639

    WordPress kk Star Ratings plugin <= 5.4.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.5.

    FeedbackWP kk Star Ratings
  • Medium 5.3
    CVE-2023-46637

    WordPress Generate Dummy Posts plugin <= 1.0.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Generate Dummy Posts: from n/a through 1.0.0.

    Saurav Sharma Generate Dummy Posts
  • Medium 5.3
    CVE-2023-46635

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= …

    YITHEMES YITH WooCommerce Product Add-Ons Web / CMS
  • High 7.1
    CVE-2023-46632

    WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3.

    David Cramer My Shortcodes
  • Medium 5.4
    CVE-2023-46633

    WordPress WP Glossary plugin <= 3.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TCBarrett Glossary allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Glossary: from n/a through 3.1.2.

    TCBarrett Glossary
  • Medium 4.3
    CVE-2023-46628

    WordPress WP Word Count plugin <= 3.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4.

    RedLettuce Plugins WP Word Count
  • Medium 6.5
    CVE-2023-46631

    WordPress Product Recommendation Quiz for eCommerce plugin <= 2.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RevenueHunt Product Recommendation Quiz for eCommerce product-recommendation-quiz-for-ecommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Recommendation Quiz for e…

    RevenueHunt Product Recommendation Quiz for eCommerce
  • Medium 5.4
    CVE-2023-46616

    WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NSquared Draw Attention allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Draw Attention: from n/a through 2.0.15.

    N Squared Draw Attention
  • Medium 4.3
    CVE-2023-46612

    WordPress Mediabay plugin <= 1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in codedraft Mediabay mediabay-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mediabay: from n/a through <= 1.6.

    codedraft Mediabay
  • Medium 5.3
    CVE-2023-46611

    WordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control Vulnerability

    Authentication Bypass by Primary Weakness vulnerability in yourownprogrammer YOP Poll allows Authentication Bypass.This issue affects YOP Poll: from n/a through 6.5.28.

    yourownprogrammer YOP Poll
  • Medium 6.5
    CVE-2023-46610

    WordPress Quill Forms plugin <= 3.3.0 - Broken Access Control + CSRF vulnerability

    Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through <= 3.3.0.

    Mohamed Magdy Quill Forms
  • Medium 5.3
    CVE-2023-46608

    WordPress DoLogin Security plugin <= 3.7.1 - Multiple Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDO DoLogin Security dologin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DoLogin Security: from n/a through <= 3.7.1.

    WPDO DoLogin Security
  • Medium 6.5
    CVE-2023-46609

    WordPress FeedFocal plugin <= 1.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in FeedFocal FeedFocal feedfocal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FeedFocal: from n/a through <= 1.2.2.

    FeedFocal FeedFocal
  • Medium 5.4
    CVE-2023-46607

    WordPress WP iCal Availability plugin <= 1.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP iCal Availability: from n/a through 1.0.3.

    WP iCal Availability WP iCal Availability
  • Medium 5.3
    CVE-2023-46605

    WordPress Convertful – Your Ultimate On-Site Conversion Tool plugin <= 2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Convertful – Your Ultimate On-Site Conversion Tool: from n/a thro…

    Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool
  • Medium 5.3
    CVE-2023-46606

    WordPress AtomChat plugin <= 1.1.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through <= 1.1.4.

    Team AtomChat AtomChat
  • Medium 5.3
    CVE-2023-46309

    WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.10.

    advancedcoding wpDiscuz
  • Medium 5.3
    CVE-2024-13107

    D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access control

    A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been classified as critical. This affects an unknown part of the file /goform/form2LocalAclEditcfg.cgi of the component ACL Handler. The manipulation leads to improper access contro…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2023-46206

    WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through <= 4.4.5.

    Webの相談所 MW WP Form
  • Medium 4.3
    CVE-2023-46203

    WordPress Just Custom Fields plugin <= 3.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in JustCoded / Alex Prokopenko Just Custom Fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Custom Fields: from n/a through 3.3.2.

    JustCoded / Alex Prokopenko Just Custom Fields
  • Medium 4.3
    CVE-2023-46196

    WordPress Social proof testimonials and reviews by Repuso plugin <= 4.97 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and revie…

    Repuso Social proof testimonials and reviews by Repuso
  • Medium 6.5
    CVE-2023-46195

    WordPress Headline Analyzer plugin <= 1.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headline Analyzer: from n/a through <= 1.3.1.

    CoSchedule Headline Analyzer
  • Medium 4.3
    CVE-2023-46188

    WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Plugin manager and cleanup…

    Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup
  • Medium 5.3
    CVE-2023-46083

    WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.27.

    WP Chill Kali Forms
  • Medium 5.3
    CVE-2023-46082

    WordPress Broken Link Checker | Finder plugin <= 2.4.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cyberlord92 Broken Link Checker | Finder broken-link-finder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Checker | Finder: from n/a through <= 2.4.2.

    cyberlord92 Broken Link Checker | Finder
  • Medium 4.3
    CVE-2023-46080

    WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ApplyOnline – Application Form Builder and Manager: from n/a throu…

    Farhan Noor ApplyOnline – Application Form Builder and Manager
  • Medium 5.4
    CVE-2023-46079

    WordPress Ashe Extra plugin <= 1.2.9 - Broken Access Control + CSRF vulnerability

    Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through 1.2.9.

    WP Royal Ashe Extra
  • Medium 5.3
    CVE-2023-46073

    WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF

    Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through <= 2.0.5.1.

    Mario Peshev DX Delete Attached Media
  • Medium 5.4
    CVE-2023-45828 Public exploit

    WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RumbleTalk Live Group Chat: from n/a through <= 6.2.5.

    RumbleTalk RumbleTalk Live Group Chat
  • Medium 5.3
    CVE-2023-45766

    WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 4.7.1.

    Ays Pro Poll Maker
  • Medium 4.3
    CVE-2023-45765

    WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through <= 1.12.6.

    wedevs WP ERP
  • Medium 5.3
    CVE-2023-45649

    WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability

    Missing Authorization vulnerability in codepeople Appointment Hour Booking appointment-hour-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Hour Booking: from n/a through <= 1.4.23.

    codepeople Appointment Hour Booking
  • Medium 4.3
    CVE-2023-45760

    WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.3.

    advancedcoding wpDiscuz
  • Medium 5.4
    CVE-2023-45636

    WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through <= 1.4.1.

    WebToffee WordPress Backup & Migration Web / CMS
  • Medium 4.3
    CVE-2023-45631

    WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.

    wpdevart Responsive Image Gallery, Gallery Album
  • Medium 6.5
    CVE-2023-45275

    WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.28.

    WP Chill Kali Forms
  • Medium 4.3
    CVE-2023-45110

    WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Timeline Lite: from n/a through <= 1.1.9.

    Bold Themes Bold Timeline Lite