CVE-2023-49752

WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoon themes Adifier - Classified Ads WordPress Theme.This issue affects Adifier - Classified Ads WordPress Theme: from n/a before 3.1.4.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Spoonthemes

Products

Adifier

CVE-2023-49764

WordPress Advanced Database Cleaner Plugin <= 3.1.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Younes JFR. Advanced Database Cleaner.This issue affects Advanced Database Cleaner: from n/a through 3.1.2.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Sigmaplugin

Products

Advanced Database Cleaner

CVE-2023-49166

WordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Magic Logix MSync.This issue affects MSync: from n/a through 1.0.0.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Magiclogix

Products

Msync

CVE-2023-49161

WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Guelben Bravo Translate.This issue affects Bravo Translate: from n/a through 1.2.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Guelbetech

Products

Bravo Translate

CVE-2023-48764

WordPress WordPress Brute Force Protection – Stop Brute Force Attacks Plugin <= 2.2.5 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GuardGiant Brute Force Protection WordPress Brute Force Protection – Stop Brute Force Attacks.This issue affects WordPress Brute Force Protection – Stop Brute Force Attacks: from n/a through 2.2.5.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Guardgiant

Products

Guardgiant

CVE-2023-48741

WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: from n/a through 4.7.8.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Quantumcloud

Products

Wpbot

CVE-2023-48742

WordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LicenseManager License Manager for WooCommerce license-manager-for-woocommerce allows SQL Injection.This issue affects License Manager for WooCommerce: from n/a through 2.2.10.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Wpexperts

Products

License Manager For Woocommerce

CVE-2023-48738

WordPress Porto Theme - Functionality Plugin < 2.12.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Porto Theme Porto Theme - Functionality.This issue affects Porto Theme - Functionality: from n/a before 2.12.1.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Portotheme

Products

Functionality

CVE-2023-48327

WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n/a through 2.4.7.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Wcvendors

Products

Woocommerce Multi-vendor\, Woocommerce Marketplace\, Product Vendors

CVE-2023-47852

WordPress Link Whisper Free Plugin <= 0.6.5 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper Link Whisper Free.This issue affects Link Whisper Free: from n/a through 0.6.5.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Linkwhisper

Products

Link Whisper Free

CVE-2023-47558

WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injection.This issue affects Who Hit The Page – Hit Counter: from n/a through 1.4.14.3.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Lindeni

Products

Who Hit The Page - Hit Counter

CVE-2023-47530

WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Page with Logs: from n/a through 1.8.7.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Wpvibes

Products

Redirect 404 Error Page To Homepage Or Custom Page With Logs

CVE-2023-47506

WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Master Slider Pro allows SQL Injection.This issue affects Master Slider Pro: from n/a through 3.6.5.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Masterslider

Products

Master Slider

CVE-2023-47236

WordPress iPages Flipbook Plugin <= 1.4.8 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects iPages Flipbook For WordPress: from n/a through 1.4.8.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Ipages Flipbook Project

Products

Ipages Flipbook

CVE-2023-45830

WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Adaplugin Online Ada

Products

Accessibility Suite By Online Ada Accessibility Suite By Online Ada

CVE-2023-40010

WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin <= 1.3.4.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Professional.This issue affects HUSKY – Products Filter for WooCommerce Professional: from n/a through 1.3.4.2.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Pluginus

Products

Husky - Products Filter Professional For Woocommerce

CVE-2023-39309

WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Avada Wordpress

Products

Fusion Builder Wordpress

CVE-2023-38519

WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance: from n/a through 4.4.3.3.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Mainwp

Products

Mainwp Dashboard

CVE-2023-35915

WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 5.9.0.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Automattic

Products

Woopayments

CVE-2023-34168

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Report Post allows SQL Injection.This issue affects WP Report Post: from n/a through 2.1.2.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Esiteq

Products

Wp Report Post