Browse CVEs

HIGH 8.8 CVE-2023-45641 Cross-Site Request Forgery (CSRF) vulnerability in Caret Inc. Caret Country Access Limit plugin <= 1.0.2 versions. Country Access Limit after 1.0.2 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45642 Cross-Site Request Forgery (CSRF) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions. Snap Pixel after 1.5.7 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45643 Cross-Site Request Forgery (CSRF) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <= 1.0 versions. Cpt Shortcode Generator after 1.0 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45645 Cross-Site Request Forgery (CSRF) vulnerability in InfoD74 WP Open Street Map plugin <= 1.25 versions. Open Street Map after 1.25 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45647 Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versions. Constant Contact Forms after 2.0.10 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45638 Cross-Site Request Forgery (CSRF) vulnerability in euPago Eupago Gateway For Woocommerce plugin <= 3.1.9 versions. Eupago Gateway Woocommerce after 3.1.9 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45650 Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com HTML5 Maps plugin <= 1.7.1.4 versions. Html5 Maps after 1.7.1.4 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45651 Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: f… Wp Attachments after 5.0.6 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45653 Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions. Video Playlist For Youtube after 6.0 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45654 Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions. Comments Rating after 1.1.7 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45655 Cross-Site Request Forgery (CSRF) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions. Pixfields after 0.7.0 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45656 Cross-Site Request Forgery (CSRF) vulnerability in Kevin Weber Lazy Load for Videos plugin <= 2.18.2 versions. Lazy Load For Videos after 2.18.2 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45273 Cross-Site Request Forgery (CSRF) vulnerability in Matt McKenny Stout Google Calendar plugin <= 1.2.3 versions. Stout Google Calendar after 1.2.3 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45274 Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions. Free Web Push after 1.3.1 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45605 Cross-Site Request Forgery (CSRF) vulnerability in Christopher Finke Feed Statistics plugin <= 4.1 versions. Feed Statistics after 4.1 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45606 Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <= 120 versions. Simple Urls after 120 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45629 Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions. Gallery Image And Video Gallery With Thumbnails after 2.0.3 Fix from $1,9502023-10-16 HIGH 8.8 CVE-2023-45276 Cross-Site Request Forgery (CSRF) vulnerability in automatededitor.Com Automated Editor plugin <= 1.3 versions. Automated Editor after 1.3 Fix from $1,9502023-10-13 MEDIUM 5.4 CVE-2023-45269 Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 2.0.25 versions. Simple Seo 2.0.26+ Fix from $1,6002023-10-13 HIGH 8.8 CVE-2023-45270 Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions. Pinpoint Booking System after 2.9.9.4.0 Fix from $1,9502023-10-13 HIGH 8.8 CVE-2023-45267 Cross-Site Request Forgery (CSRF) vulnerability in Zizou1988 IRivYou plugin <= 2.2.1 versions. Irivyou after 2.2.1 Fix from $1,9502023-10-13 HIGH 8.8 CVE-2023-45268 Cross-Site Request Forgery (CSRF) vulnerability in Hitsteps Hitsteps Web Analytics plugin <= 5.86 versions. Hitsteps Web Analytics after 5.86 Fix from $1,9502023-10-13 HIGH 8.8 CVE-2023-45109 Cross-Site Request Forgery (CSRF) vulnerability in ZAKSTAN WhitePage plugin <= 1.1.5 versions. Whitepage after 1.1.5 Fix from $1,9502023-10-13 HIGH 8.8 CVE-2023-45107 Cross-Site Request Forgery (CSRF) vulnerability in GoodBarber plugin <= 1.0.22 versions. Goodbarber after 1.0.22 Fix from $1,9502023-10-13 HIGH 8.8 CVE-2023-45108 Cross-Site Request Forgery (CSRF) vulnerability in Mailrelay plugin <= 2.1.1 versions. Mailrelay after 2.1.1 Fix from $1,9502023-10-13 HIGH 8.1 CVE-2023-43148 SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts. Spa Cart No fix yet Fix from $1,9502023-10-12 HIGH 8.8 CVE-2023-43149 SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status. Spa Cart No fix yet Fix from $1,9502023-10-12 HIGH 8.8 CVE-2023-43147 PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index… Limo Booking Software No fix yet Fix from $1,9502023-10-12 HIGH 8.8 CVE-2023-45102 Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Blog Manager Light plugin <= 1.20 versions. Blog Manager Light after 1.20 Fix from $1,9502023-10-12 HIGH 8.8 CVE-2023-45103 Cross-Site Request Forgery (CSRF) vulnerability in YAS Global Team Permalinks Customizer plugin <= 2.8.2 versions. Permalinks Customizer after 2.8.2 Fix from $1,9502023-10-12