Browse CVEs

MEDIUM 6.5 CVE-2023-37391 Cross-Site Request Forgery (CSRF) vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Ap… Wordpress Mobile Pack after 3.4.1 Fix from $1,6002023-07-11 HIGH 8.8 CVE-2023-36693 Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez WP RSS Images plugin <= 1.1 versions. Wp Rss Images after 1.1 Fix from $1,9502023-07-11 HIGH 8.8 CVE-2022-29561 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX … Ruggedcom Rox Mx5000 Firmware 2.16.0+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-34015 Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for Wo… Advanced Free Flat Shipping Woocommerce 1.6.4.6+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-35774 Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.4.1 versions. Lws Tools 2.4.2+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-35913 Cross-Site Request Forgery (CSRF) vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.44 versions. Oopspam Anti Spam 1.1.45+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-36517 Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions. Wp Abstracts after 2.6.2 Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-23704 Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.6 versions. Comments Rating 1.1.7+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-23731 Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <= 1.3.3 versions. Wishsuite 1.3.4+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-23997 Cross-Site Request Forgery (CSRF) vulnerability in Dave Jesch Database Collation Fix plugin <= 1.2.7 versions. Database Collation Fix 1.2.8+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-24421 Cross-Site Request Forgery (CSRF) vulnerability in WP Engine PHP Compatibility Checker plugin <= 1.5.2 versions. Php Compatibility Checker 1.6.0+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-25051 Cross-Site Request Forgery (CSRF) vulnerability in Denishua Comment Reply Notification plugin <= 1.4 versions. Comment Reply Notification after 1.4 Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-25468 Cross-Site Request Forgery (CSRF) vulnerability in Reservation.Studio Reservation.Studio widget plugin <= 1.0.11 versions. Reservation.studio after 1.0.11 Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-25487 Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade PixTypes plugin <= 1.4.14 versions. Pixtypes 1.4.15+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-35781 Cross-Site Request Forgery (CSRF) vulnerability in LWS Cleaner plugin <= 2.3.0 versions. Lws Cleaner 2.3.1+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2022-45823 Cross-Site Request Forgery (CSRF) vulnerability in GalleryPlugins Video Contest WordPress plugin <= 3.2 versions. Video Contest Wordpress after 3.2 Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-23803 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes JustTables plugin <= 1.4.9 versions. Justtables 1.5.0+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-23791 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Menu plugin <= 1.2.1 versions. Ht Menu 1.2.2+ Fix from $1,9502023-07-11 HIGH 8.8 CVE-2023-23792 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Swatchly plugin <= 1.2.0 versions. Swatchly 1.2.1+ Fix from $1,9502023-07-11 HIGH 7.1 CVE-2023-2079 The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on … Buy Me A Coffee 3.8+ Fix from $1,9502023-07-11 CRITICAL 9.6 CVE-2023-37277 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API allows executing all actions vi… Xwiki 14.10.8 / 15.2+ Fix from $2,3002023-07-10 HIGH 8.8 CVE-2023-3579 A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the co… Hadsky No fix yet Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-35912 Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Potent Donations for WooCommerce plugin <= 1.1.9 versions. Potent Donations For Woocommerce after 1.1.9 Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-36691 Cross-Site Request Forgery (CSRF) vulnerability in Albert Peschar WebwinkelKeur plugin <= 3.24 versions. Webwinkelkeur 3.25+ Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-37392 Cross-Site Request Forgery (CSRF) vulnerability in Deepak Anand WP Dummy Content Generator plugin <= 2.3.0 versions. Wp Dummy Content Generator 3.0.0+ Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-28986 Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin <= 2.9.20 versions. Affiliates Manager 2.9.21+ Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-28989 Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions. Happy Addons For Elementor 3.8.3+ Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-28995 Cross-Site Request Forgery (CSRF) vulnerability in Keith Solomon Configurable Tag Cloud (CTC) plugin <= 5.2 versions. Configurable Tag Cloud 5.3+ Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-22673 Cross-Site Request Forgery (CSRF) vulnerability in MageNet Website Monetization by MageNet plugin <= 1.0.29.1 versions. Website Monetization after 1.0.29.1 Fix from $1,9502023-07-10 HIGH 8.8 CVE-2023-22694 Cross-Site Request Forgery (CSRF) vulnerability in Arian Khosravi, Norik Davtian BigContact Contact Page plugin <= 1.5.8 versions. Bigcontact Contact Page after 1.5.8 Fix from $1,9502023-07-10