Search

Search Results (346208 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-47689 1 Wordpress 1 Wordpress 2026-04-23 6.5 Medium
Missing Authorization vulnerability in Toast Plugins Animator scroll-triggered-animations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through <= 3.0.10.
CVE-2023-47661 2026-04-23 5.4 Medium
Missing Authorization vulnerability in Dragfy Dragfy Addons for Elementor dragfy-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dragfy Addons for Elementor: from n/a through <= 1.0.2.
CVE-2023-47648 2 Spider-themes, Wordpress 2 Eazydocs, Wordpress 2026-04-23 N/A
Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through <= 2.3.5.
CVE-2023-47647 2026-04-23 4.3 Medium
Missing Authorization vulnerability in learningtimes BadgeOS badgeos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BadgeOS: from n/a through <= 3.7.1.6.
CVE-2023-47557 2026-04-23 N/A
Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visitors Traffic Real Time Statistics: from n/a through <= 7.2.
CVE-2023-47525 1 Awplife 1 Event Monster 2026-04-23 5.9 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Event Management Tickets Booking event-monster allows DOM-Based XSS.This issue affects Event Management Tickets Booking: from n/a through <= 1.4.9.
CVE-2023-47523 1 Wordpress 1 Wordpress 2026-04-23 4.3 Medium
Missing Authorization vulnerability in Ecreate Infotech Auto Tag Creator auto-tag-creator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Tag Creator: from n/a through <= 1.0.2.
CVE-2023-47517 1 Pressified 1 Sendpress 2026-04-23 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs SendPress Newsletters sendpress allows DOM-Based XSS.This issue affects SendPress Newsletters: from n/a through <= 1.23.11.6.
CVE-2023-47515 2026-04-23 5.3 Medium
Missing Authorization vulnerability in Nick Spencer Seers seers-cookie-consent-banner-privacy-policy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seers: from n/a through <= 8.1.1.
CVE-2023-47241 2026-04-23 N/A
Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headless ecommerce: from n/a through <= 3.11.2.
CVE-2023-47225 2 Kaizencoders, Wordpress 2 Short Url, Wordpress 2026-04-23 N/A
Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Short URL: from n/a through <= 1.6.8.
CVE-2023-47224 2026-04-23 N/A
Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through <= 7.8.0.
CVE-2023-47188 1 Presstigers 1 Simple Job Board 2026-04-23 9.8 Critical
Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through <= 2.10.5.
CVE-2023-47187 1 Wordpress 1 Wordpress 2026-04-23 N/A
Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Rotating Words: from n/a through <= 5.4.
CVE-2023-47183 1 Givewp 1 Givewp 2026-04-23 9.8 Critical
Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= 2.33.1.
CVE-2023-47180 1 Xlplugins 1 Finale 2026-04-23 6.5 Medium
Missing Authorization vulnerability in Daman Jeet Finale Lite finale-woocommerce-sales-countdown-timer-discount allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale Lite: from n/a through <= 2.16.0.
CVE-2023-47179 2 Byconsole, Wordpress 2 Wooodt Lite, Wordpress 2026-04-23 N/A
Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through <= 2.4.6.
CVE-2023-46644 2026-04-23 6.5 Medium
Missing Authorization vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress CTA: from n/a through <= 1.5.8.
CVE-2023-46639 2026-04-23 5.3 Medium
Missing Authorization vulnerability in properfraction kk Star Ratings kk-star-ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through <= 5.4.5.
CVE-2023-46637 1 Wordpress 1 Wordpress 2026-04-23 5.3 Medium
Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts generate-dummy-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Generate Dummy Posts: from n/a through <= 1.0.0.