Skip to content
OpenAdvisories

Vendor

cl272

3 known vulnerabilities.

Products

Enhanced Text Widget 3 Ultimate Posts Widget 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-49192

    WordPress Enhanced Text Widget plugin <= 1.6.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in cl272 Enhanced Text Widget enhanced-text-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Text Widget: from n/a through <= 1.6.3.

    cl272 Enhanced Text Widget
  • Medium 4.3
    CVE-2023-0958

    Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

    Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it poss…

    Inisev Migrate cl272 steve85b
  • Medium 4.3
    CVE-2023-3977

    Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

    Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various ver…

    Inisev Migrate cl272 steve85b