Missing Authorization vulnerability in Vark Pricing Deals for WooCommerce.This issue affects Pricing Deals for WooCommerce: from n/a through 2.0.3.2.

CVE-2023-41243HIGHCVSS 8.8EG 8.8

2024-05-17

Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90.

CVE-2023-41296CRITICALCVSS 9.1EG 9.1

2023-09-25

Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality.

CVE-2023-4164HIGHCVSS 8.4EG 8.4

2024-01-02

There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed.

CVE-2023-41649MEDIUMCVSS 6.5EG 6.5

2024-12-13

Missing Authorization vulnerability in Ovic Team Ovic Product Bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovic Product Bundle: from n/a through 1.1.2.

CVE-2023-41651MEDIUMCVSS 6.5EG 6.5

2024-05-08

Missing Authorization vulnerability in Multi-column Tag Map.This issue affects Multi-column Tag Map: from n/a through 17.0.26.

CVE-2023-41656MEDIUMCVSS 5.4EG 5.4

2025-12-30

Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Elementor Addons: from n/a through 1.3.7.

CVE-2023-41664MEDIUMCVSS 6.5EG 6.5

2024-12-13

Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4.

CVE-2023-41671MEDIUMCVSS 5.4EG 5.4

2024-12-13

Missing Authorization vulnerability in tychesoftwares Abandoned Cart Lite for WooCommerce woocommerce-abandoned-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Abandoned Cart Lite for WooComm…

CVE-2023-41683MEDIUMCVSS 5.4EG 5.4

2024-12-13

Missing Authorization vulnerability in Pechenki TelSender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TelSender: from n/a through 1.14.11.

CVE-2023-41688MEDIUMCVSS 5.4EG 5.4

2024-12-13

Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5.

CVE-2023-41689MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in Koen Reus Post to Google My Business (Google Business Profile) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post to Google My Business (Google Business Pr…

CVE-2023-41690MEDIUMCVSS 5.3EG 5.3

2024-12-13

Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify Social Proof: from n/a through 2.5.

CVE-2023-41695LOWCVSS 3.5EG 3.5

2024-12-13

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.1.0.

CVE-2023-41750MEDIUMCVSS 5.5EG 3.3

2023-08-31

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 32047.

CVE-2023-41802MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Socializer: from n/a through 7.13.54.

CVE-2023-41803MEDIUMCVSS 5.3EG 5.3

2024-12-13

Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0.

CVE-2023-41805MEDIUMCVSS 6.5EG 6.5

2024-06-19

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2…

CVE-2023-41848MEDIUMCVSS 5.3EG 5.3

2024-12-13

Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.

CVE-2023-41849MEDIUMCVSS 5.3EG 5.3

2024-12-13

Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.

CVE-2023-41857MEDIUMCVSS 5.4EG 5.4

2024-12-13

Missing Authorization vulnerability in ClickToTweet.com Click To Tweet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Click To Tweet: from n/a through 2.0.14.

CVE-2023-41865MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro: from n/a through 4.8.6.

CVE-2023-41866MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic YouTube Gallery: from n/a through 2.3.3.

CVE-2023-41869MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.4.

CVE-2023-41870MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5.

CVE-2023-41873MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SAML SP Single Sign On: from n/a through 5.0.4.

CVE-2023-41875MEDIUMCVSS 5.3EG 5.3

2024-12-13

Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through 1.2.6.

CVE-2023-41908MEDIUMCVSS 5.3EG 5.3

2023-09-05

Cerebrate before 1.15 lacks the Secure attribute for the session cookie.

CVE-2023-41941MEDIUMCVSS 4.3EG 4.3

2023-09-06

A missing permission check in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins.

CVE-2023-41943MEDIUMCVSS 6.5EG 6.5

2023-09-06

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to clear the SQS queue.

CVE-2023-41945HIGHCVSS 8.8EG 8.8

2023-09-06

Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions a…

CVE-2023-41947MEDIUMCVSS 4.3EG 4.3

2023-09-06

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials.

CVE-2023-41951MEDIUMCVSS 4.3EG 4.3

2024-12-13

Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a …

CVE-2023-41952MEDIUMCVSS 5.3EG 5.3

2024-12-13

Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 5.0.8.

CVE-2023-41953MEDIUMCVSS 5.3EG 5.3

2024-12-09

Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1.

CVE-2023-4198MEDIUMCVSS 6.5EG 6.5

2023-11-01

Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data

CVE-2023-42358HIGHCVSS 7.7EG 7.7

2024-01-03

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the E2Manager API component.

CVE-2023-4245MEDIUMCVSS 4.3EG 4.3

2023-08-31

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetInvoiceDetail function in versions up to, and including, 1.2.89. This makes it possible for subscrib…

CVE-2023-42469LOWCVSS 3.3EG 3.3

2023-09-13

The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.se…

CVE-2023-42473MEDIUMCVSS 5.4EG 5.4

2023-10-10

S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges which has low impact on the confidentiality and integrity of the applic…

CVE-2023-42631MEDIUMCVSS 5.5EG 5.5

2023-11-01