CVE-2024-0972

BuddyPress Members Only <= 3.4.8 - Improper Access Control to Sensitive Information Exposure via REST API

The BuddyPress Members Only plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.9 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "All Other Sections On Your Site Will be Opened to Guest" feature (when unset) and view restricted page and post content.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Membersonly Zhuyi

Products

Buddypress Members Only Buddypress Members Only

CVE-2024-0969

ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API

The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Default Restriction" feature and view restricted post content.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Reputeinfosystems

Products

Arforms Armember

CVE-2024-0965

Simple Page Access Restriction <= 1.0.21 - Improper Access Control to Sensitive Information Exposure via REST API

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Pluginsandsnippets

Products

Simple Page Access Restriction

CVE-2024-0687

Restrict User Access – Ultimate Membership & Content Protection <= 2.5 - Information Exposure

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Dev.institute

Products

Restrict User Access

CVE-2024-0631

Duitku Payment Gateway <= 2.11.6 - Missing Authorization via check_duitku_response

The Duitku Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the check_duitku_response function in all versions up to, and including, 2.11.6. This makes it possible for unauthenticated attackers to change the payment status of orders to failed.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Duitku

Products

Duitku Payment Gateway

CVE-2024-0377

LifterLMS – WordPress LMS Plugin for eLearning <= 7.5.1 - Missing Authorization via process_review

The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_review' function in all versions up to, and including, 7.5.1. This makes it possible for unauthenticated attackers to publish an unrestricted number of reviews on the site.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Lifterlms

Products

Lifterlms

CVE-2024-0373

Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via save_view

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.2. This is due to missing or incorrect nonce validation on the 'save_view' function. This makes it possible for unauthenticated attackers to modify arbitrary post titles via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Formviewswp

Products

Views For Wpforms

CVE-2024-0371

Views for WPForms <= 3.2.2 - Missing Authorization via create_view

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'create_view' function in all versions up to, and including, 3.2.2. This makes it possible for authenticated attackers, with subscriber access and above, to create form views.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Formviewswp

Products

Views For Wpforms

CVE-2024-0369

Bulk Edit Post Titles <= 5.0.0 - Missing Authorization via bulkUpdatePostTitles

The Bulk Edit Post Titles plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bulkUpdatePostTitles function in all versions up to, and including, 5.0.0. This makes it possible for authenticated attackers, with subscriber access and above, to modify the titles of arbitrary posts.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Pawaryogesh1989

Products

Bulk Edit Post Titles

CVE-2024-0366

Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference

The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.7 via the action function due to missing validation on a user controlled key. This makes it possible for subscribers to view plugin preferences and potentially other user settings.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Squirrly

Products

Starbox

CVE-2023-6582

ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via the ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to obtain contents of posts in draft, private or pending review status that should not be visible to the general public. This applies to posts created with Elementor only.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Wpmet

Products

Elements Kit Elementor Addons

CVE-2023-6491

Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12. This makes it possible for authenticated attackers, with contributor access and above, to modify favorite views.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Wpchill

Products

Strong Testimonials

CVE-2023-2159

CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and including, 4.1.7. A correct cmp_bypass GET parameter in the URL (equal to the md5-hashed home_url in the default setting) allows users to visit a site placed in maintenance mode thus bypassing the plugin's provided feature.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Niteothemes

Products

Cmp

CVE-2022-4711

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_settings' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to enable and modify Mega Menu settings for any menu item.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Royal-elementor-addons

Products

Royal Elementor Addons

CVE-2022-4709

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_template' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to import and activate templates from the plugin's template library.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Royal-elementor-addons

Products

Royal Elementor Addons

CVE-2022-4708

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_template_conditions' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to modify the conditions under which templates are displayed.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Royal-elementor-addons

Products

Royal Elementor Addons

CVE-2022-4702

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_fix_royal_compatibility' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to deactivate every plugin on the site unless it is part of an extremely limited hardcoded selection. This also switches the site to the 'royal-elementor-kit' theme, potentially resulting in availability issues.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Royal-elementor-addons

Products

Royal Elementor Addons

CVE-2022-4700

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Royal-elementor-addons

Products

Royal Elementor Addons

CVE-2021-4380

Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wp_pinterest_automatic_parse_request' function and the 'process_form.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to update arbitrary options on a site that can be used to create new administrative user accounts or redirect unsuspecting site visitors.

CVSS 3.1 · 9.8 Critical EPSS 4.5% KEV · Not listed

Vendors

Valvepress

Products

Pinterest Automatic Pin

CVE-2020-36721

Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Colorlib Cpothemes Machothemes

Products

Activello Bonkers Illdy and 12 more