Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.10.

CVE-2023-46352HIGHCVSS 7.5EG 7.5

2023-11-02

In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" (facebookconversiontrackingplus) up to version 2.4.9 from Smart Modules for PrestaShop, a guest can download personal information without restriction. Due to a l…

CVE-2023-46354HIGHCVSS 7.5EG 7.5

2023-12-06

In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from…

CVE-2023-4637MEDIUMCVSS 4.3EG 4.3

2024-02-05

The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore() and get_restore_progress() function in versions up to, and including, 0.9.94. This makes it possible for unaut…

CVE-2023-4645MEDIUMCVSS 5.3EG 5.3

2023-10-19

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai_ajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slu…

CVE-2023-46605MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Convertful – Your Ultimate On-Site Conver…

CVE-2023-46606MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through <= 1.1.4.

CVE-2023-46607MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP iCal Availability: from n/a through 1.0.3.

CVE-2023-46608MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in WPDO DoLogin Security dologin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DoLogin Security: from n/a through <= 3.7.1.

CVE-2023-46609MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in FeedFocal FeedFocal feedfocal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FeedFocal: from n/a through <= 1.2.2.

CVE-2023-46610MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through <= 3.3.0.

CVE-2023-46612MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in codedraft Mediabay mediabay-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mediabay: from n/a through <= 1.6.

CVE-2023-46616MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in NSquared Draw Attention allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Draw Attention: from n/a through 2.0.15.

CVE-2023-46628MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4.

CVE-2023-46631MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in RevenueHunt Product Recommendation Quiz for eCommerce product-recommendation-quiz-for-ecommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Recom…

CVE-2023-46632HIGHCVSS 7.1EG 7.1

2025-01-02

Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Shortcodes: from n/a through 2.3.

CVE-2023-46633MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in TCBarrett Glossary allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Glossary: from n/a through 3.1.2.

CVE-2023-46635MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Add-Ons: …

CVE-2023-46637MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Generate Dummy Posts: from n/a through 1.0.0.

CVE-2023-46639MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.5.

CVE-2023-46644MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in WP CTA PRO WordPress CTA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress CTA: from n/a through 1.5.8.

CVE-2023-46652MEDIUMCVSS 4.3EG 4.3

2023-10-25

A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.

CVE-2023-4668MEDIUMCVSS 5.3EG 5.3

2023-10-20

The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data includi…

CVE-2023-4686MEDIUMCVSS 4.3EG 4.3

2023-11-22

The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.6.6 via the ajax_enabled_posts function. This can allow authenticated attackers to extract sensitive data such…

CVE-2023-4700LOWCVSS 3.5EG 3.5

2023-11-06

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.

CVE-2023-47112MEDIUMCVSS 4.3EG 4.3

2023-11-16

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions access to two URLs used in both Rundeck Open Source and Process Automation products could allow authenticated users to a…

CVE-2023-47148MEDIUMCVSS 5.3EG 5.3

2024-02-02

IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the syste…

CVE-2023-47179HIGHCVSS 8.8EG 8.8

2025-01-02

Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through <= 2.4.6.

CVE-2023-47180MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale Lite: from n/a through 2.16.0.

CVE-2023-47183MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= 2.33.1.

CVE-2023-47187MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Rotating Words: from n/a through <= 5.4.

CVE-2023-47188MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through <= 2.10.5.

CVE-2023-47224HIGHCVSS 7.5EG 7.5

2025-01-02

Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through <= 7.8.0.

CVE-2023-47225MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Short URL: from n/a through <= 1.6.8.

CVE-2023-4723MEDIUMCVSS 5.3EG 5.3

2023-11-15

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive d…

CVE-2023-47241MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headless ecommerce: fr…

CVE-2023-4728MEDIUMCVSS 4.3EG 4.3

2024-03-12

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for …

CVE-2023-4730MEDIUMCVSS 5.3EG 5.3

2024-08-17

The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.3. This makes it possible for unauth…

CVE-2023-47458CRITICALCVSS 9.8EG 9.8

2024-01-02

An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.

CVE-2023-47515MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Seers Seers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seers: from n/a through 8.1.1.

CVE-2023-47523MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in Ecreate Infotech Auto Tag Creator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Tag Creator: from n/a through 1.0.2.

CVE-2023-47557MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visitors Traffic Real Time…

CVE-2023-47573HIGHCVSS 8.8EG 8.8

2023-12-13

An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions.

CVE-2023-47647MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in LearningTimes BadgeOS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BadgeOS: from n/a through 3.7.1.6.

CVE-2023-47648HIGHCVSS 7.5EG 7.5

2025-01-02

Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through <= 2.3.5.

CVE-2023-47661MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in Dragfy Dragfy Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dragfy Addons for Elementor: from n/a through 1.0.2.

CVE-2023-47681MEDIUMCVSS 6.5EG 6.5

2024-06-19

Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout Manager: from n/a through 7.3.0.

CVE-2023-47689MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through 3.0.10.

CVE-2023-47692MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through <= 1.0.41.

CVE-2023-47693HIGHCVSS 7.5EG 7.5

2025-01-02

Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Fo…

CWE-862— Missing Authorization

CVEs classified under CWE-862page 54 of 153

Map vulnerabilities like CWE-862 to your infrastructure