[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424298
> CVE-2023-46609 [MEDIUM 6.5]
[PUBLISHED: 2025-01-02] [EPSS 0.49%]
Missing Authorization vulnerability in FeedFocal FeedFocal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FeedFocal: from n/a through 1.2.2.
> CVE-2023-46608 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.48%]
Missing Authorization vulnerability in WPDO DoLogin Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DoLogin Security: from n/a through 3.7.1.
> CVE-2023-46607 [MEDIUM 5.4]
[PUBLISHED: 2025-01-02] [EPSS 0.38%]
Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP iCal Availability: from n/a through 1.0.3.
> CVE-2023-46606 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.48%]
Missing Authorization vulnerability in AtomChat AtomChat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through 1.1.4.
> CVE-2023-46605 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.42%]
Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Convertful – Your Ultimate On-Site Conversion Tool: from n/a through 2.5.
> CVE-2023-46309 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.43%]
Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through 7.6.10.
AFFECTED_PRODUCTS: Gvectors Wpdiscuz
> CVE-2023-46206 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.47%]
Missing Authorization vulnerability in websoudan MW WP Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through 4.4.5.
> CVE-2023-46203 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.37%]
Missing Authorization vulnerability in JustCoded / Alex Prokopenko Just Custom Fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Custom Fields: from n/a through 3.3.2.
> CVE-2023-46196 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.53%]
Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through 4.97.
> CVE-2023-46195 [MEDIUM 6.5]
[PUBLISHED: 2025-01-02] [EPSS 0.39%]
Missing Authorization vulnerability in CoSchedule Headline Analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headline Analyzer: from n/a through 1.3.1.
> CVE-2023-46188 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.52%]
Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Plugin manager and cleanup: from n/a through 2.1.3.
> CVE-2023-46083 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.42%]
Missing Authorization vulnerability in Kali Forms Contact Form builder with drag & drop - Kali Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form builder with drag & drop - Kali Forms: from n/a through 2.3.27.
> CVE-2023-46082 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.43%]
Missing Authorization vulnerability in Cyberlord92 Broken Link Checker | Finder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Checker | Finder: from n/a through 2.4.2.
> CVE-2023-46080 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.42%]
Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ApplyOnline – Application Form Builder and Manager: from n/a through 2.5.3.
> CVE-2023-46079 [MEDIUM 5.4]
[PUBLISHED: 2025-01-02] [EPSS 0.44%]
Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through 1.2.9.
> CVE-2023-46073 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.43%]
Missing Authorization vulnerability in nofearinc DX Delete Attached Media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through 2.0.5.1.
> CVE-2023-45828 [MEDIUM 5.4]
[PUBLISHED: 2025-01-02] [EPSS 1.00%]
Missing Authorization vulnerability in RumbleTalk Ltd RumbleTalk Live Group Chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RumbleTalk Live Group Chat: from n/a through 6.2.5.
> CVE-2023-45766 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.42%]
Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 4.7.1.
AFFECTED_PRODUCTS: Ays-Pro Poll Maker
> CVE-2023-45765 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.38%]
Missing Authorization vulnerability in weDevs WP ERP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through 1.12.6.
AFFECTED_PRODUCTS: Wedevs Wp Erp
> CVE-2023-45760 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.52%]
Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through 7.6.3.
AFFECTED_PRODUCTS: Gvectors Wpdiscuz
> CVE-2023-45649 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.38%]
Missing Authorization vulnerability in CodePeople Appointment Hour Booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Hour Booking: from n/a through 1.4.23.
> CVE-2023-45636 [MEDIUM 5.4]
[PUBLISHED: 2025-01-02] [EPSS 0.47%]
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through 1.4.1.
> CVE-2023-45631 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.38%]
Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.
AFFECTED_PRODUCTS: Wpdevart Gallery
> CVE-2023-45275 [MEDIUM 6.5]
[PUBLISHED: 2025-01-02] [EPSS 0.46%]
Missing Authorization vulnerability in Kali Forms Contact Form builder with drag & drop - Kali Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form builder with drag & drop - Kali Forms: from n/a through 2.3.28.
> CVE-2023-45271 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.35%]
Missing Authorization vulnerability in WowStore Team ProductX – Gutenberg WooCommerce Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProductX – Gutenberg WooCommerce Blocks: from n/a through 2.7.8.
> CVE-2023-45110 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.38%]
Missing Authorization vulnerability in BoldThemes Bold Timeline Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Timeline Lite: from n/a through 1.1.9.
> CVE-2023-45104 [HIGH 7.3]
[PUBLISHED: 2025-01-02] [EPSS 0.46%]
Missing Authorization vulnerability in WPDeveloper BetterLinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterLinks: from n/a through 1.6.0.
> CVE-2023-45101 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.42%]
Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Reviews for WooCommerce: from n/a through 5.36.0.
AFFECTED_PRODUCTS: Cusrev Customer Reviews For Woocommerce
> CVE-2023-45061 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.38%]
Missing Authorization vulnerability in AWSM Innovations WP Job Openings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Openings: from n/a through 3.4.1.
> CVE-2023-45045 [MEDIUM 5.4]
[PUBLISHED: 2025-01-02] [EPSS 0.44%]
Missing Authorization vulnerability in Kishor Khambu WP Custom Widget area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Widget area: from n/a through 1.2.5.
> CVE-2023-45002 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.38%]
Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 3.6.8.
> CVE-2023-44988 [MEDIUM 4.3]
[PUBLISHED: 2025-01-02] [EPSS 0.34%]
Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.32.
> CVE-2023-44258 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.45%]
Missing Authorization vulnerability in Schema App Schema App Structured Data allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through 1.23.1.
> CVE-2024-13105 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.82%]
A vulnerability has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/form2Dhcpd.cgi of the component DHCPD Setting Handler. The manipulation leads to improper access controls. The attack...
AFFECTED_PRODUCTS: Dlink Dir 816 Firmware
> CVE-2024-13104 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.76%]
A vulnerability, which was classified as critical, was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. Affected is an unknown function of the file /goform/form2AdvanceSetup.cgi of the component WiFi Settings Handler. The manipulation leads to improper access controls. It is possible to launch the...
AFFECTED_PRODUCTS: Dlink Dir 816 Firmware
> CVE-2024-56069 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Azzaroco WP SuperBackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through 2.3.3.
> CVE-2024-56060 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTML Forms allows Reflected XSS.This issue affects HTML Forms: from n/a through 1.4.1.
> CVE-2024-56038 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendSMS allows Reflected XSS.This issue affects SendSMS: from n/a through 1.2.9.
> CVE-2024-56037 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md Maruf Adnan Sami User Referral allows Reflected XSS.This issue affects User Referral: from n/a through 8.0.
> CVE-2024-56036 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ondrej Donek odPhotogallery allows Reflected XSS.This issue affects odPhotogallery: from n/a through 0.5.3.
> CVE-2024-56035 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kurt Payne Upload Scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through 1.2.
> CVE-2024-56034 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Irshad Services updates for customers allows Reflected XSS.This issue affects Services updates for customers: from n/a through 1.0.
> CVE-2024-56033 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs allows Reflected XSS.This issue affects FAQs: from n/a through 1.0.2.
> CVE-2024-56032 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Foliovision FV Descriptions allows Reflected XSS.This issue affects FV Descriptions: from n/a through 1.4.
> CVE-2024-56030 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10CentMail allows Reflected XSS.This issue affects 10CentMail: from n/a through 2.1.50.
> CVE-2024-56029 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dreamwinner Easy Language Switcher allows Reflected XSS.This issue affects Easy Language Switcher: from n/a through 1.0.
> CVE-2024-56028 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lemonade Coding Studio Lemonade Social Networks Autoposter Pinterest allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through 2.0.
> CVE-2024-56027 [HIGH 7.1]
[PUBLISHED: 2025-01-02] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BizSwoop a CPF Concepts, LLC Brand Leads CRM allows Reflected XSS.This issue affects Leads CRM: from n/a through 2.0.13.
> CVE-2024-56019 [MEDIUM 6.5]
[PUBLISHED: 2025-01-02] [EPSS 0.25%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gavin Rehkemper Inline Footnotes allows Stored XSS.This issue affects Inline Footnotes: from n/a through 2.3.0.
> CVE-2024-13103 [MEDIUM 5.3]
[PUBLISHED: 2025-01-02] [EPSS 0.85%]
A vulnerability, which was classified as critical, has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This issue affects some unknown processing of the file /goform/form2AddVrtsrv.cgi of the component Virtual Service Handler. The manipulation leads to improper access controls. The attack ma...
AFFECTED_PRODUCTS: Dlink Dir 816 Firmware