CVE Vulnerability Catalog

The eShipper Commerce plugin for WordPress up to version 2.16.12 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

The WordPress plugin WP Frontend Profile up to version 1.3.9 suffers from a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Missing Authorization vulnerability in Rapid Car Check Vehicle Data up to version 2.0 allows exploiting incorrectly configured access control security levels.

The BSK PDF Manager plugin for WordPress (versions up to 3.7.2) exposes sensitive system information to unauthorized entities, allowing retrieval of embedded sensitive data.

The Moneytizer plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This affects versions up to and including 10.0.10.

The Garden Gnome Package plugin for WordPress versions up to and including 2.4.1 contains a DOM-Based XSS vulnerability due to improper input neutralization during page generation, allowing DOM-based XSS attacks.

Missing authorization in the linkPizza-Manager plugin (linkpizza-manager) allows exploiting incorrectly configured access control security levels. The vulnerability affects versions up to 5.5.5 inclusive.

Missing authorization in the Diet Calorie Calculator plugin (diet-calorie-calculator) allows exploiting incorrectly configured access control security levels. The vulnerability affects versions up to 1.1.1 inclusive.

Missing authorization in the Pinpoint Booking System plugin (booking-system) allows exploiting incorrectly configured access control security levels. The vulnerability affects versions up to 2.9.9.6.5 inclusive.

The Download Manager plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 3.3.52.

The Court Reservation plugin for WordPress (versions up to 1.10.11) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

A DOM-based Cross-site Scripting vulnerability in the MK Google Directions plugin allows injection of malicious client-side scripts. The issue affects versions up to and including 3.1.1.

The iZooto plugin for WordPress (versions up to 3.7.20) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Missing Authorization vulnerability in ShipTime: Discounted Shipping Rates for WordPress up to version 1.1.1 allows exploiting incorrectly configured access control security levels.

A Server-Side Request Forgery vulnerability in the Visual Link Preview plugin allows sending requests from the server to internal resources. The issue affects versions up to and including 2.3.0.

The NitroPack WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.19.3.

The Book Previewer for Woocommerce plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.0.6.

The Korea SNS plugin for WordPress contains a DOM-based XSS vulnerability. Improper input sanitization allows an attacker to inject malicious scripts.

A DOM-based Cross-site Scripting vulnerability in the Hello Bar Popup Builder plugin allows injection of malicious client-side scripts. The issue affects versions up to and including 1.5.1.

A DOM-based Cross-site Scripting vulnerability in the SEO Friendly Images plugin allows injection of malicious client-side scripts. The issue affects versions up to and including 3.0.5.