Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
41,587 results · page 662 of 832
Oct 31, 2023Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-24410 · WordPress plugins & themes · reported by PatchstackMedium 5.5
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms: from n/a through 4.3.25.
- Product
- Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms
- Affected
- up to 4.3.25
- What to do
- Affects up to 4.3.25. Update Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023EventPrime: Does not have CSRF checksCVE-2023-5519 · WordPress plugins & themes · reported by WPScanMedium 4.3
The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.
- Product
- EventPrime
- Fixed in
- 3.2.0
- What to do
- Update EventPrime to 3.2.0 or newer.
Oct 31, 2023CITS Support svg, webp Media and TTF,OTF File Upload: Does not sanitise uploaded SVG filesCVE-2023-5458 · WordPress plugins & themes · reported by WPScanMedium 5.4
The CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin before 3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.
- Product
- CITS Support svg, webp Media and TTF,OTF File Upload
- Fixed in
- 3.0
- What to do
- Update CITS Support svg, webp Media and TTF,OTF File Upload to 3.0 or newer.
Oct 31, 2023Royal Elementor Addons and Templates: Does not properly validate uploaded filesCVE-2023-5360 · WordPress plugins & themes · reported by WPScanCritical 9.8
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
- Product
- Royal Elementor Addons and Templates
- Fixed in
- 1.3.79
- What to do
- Update Royal Elementor Addons and Templates to 1.3.79 or newer.
Full record and what to do →NVD recordpacketstormsecurity.comwpscan.com
Oct 31, 2023Photos and Files Contest Gallery: Does not sanitise and escape some parametersCVE-2023-5307 · WordPress plugins & themes · reported by WPScanMedium 6.1
The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.
- Product
- Photos and Files Contest Gallery
- Fixed in
- 21.2.8.1
- What to do
- Update Photos and Files Contest Gallery to 21.2.8.1 or newer.
Full record and what to do →NVD recordresearch.cleantalk.orgwpscan.com
Oct 31, 2023Login Screen Manager: Does not sanitize and escape some of its settingsCVE-2023-5243 · WordPress plugins & themes · reported by WPScanMedium 4.8
The Login Screen Manager WordPress plugin through 3.5.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
- Product
- Login Screen Manager
- Affected
- up to 3.5.2
- What to do
- Affects up to 3.5.2. Update Login Screen Manager to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Oct 31, 2023EventPrime: Does not sanitise and escape a parameter before outputting it back in the pageCVE-2023-5238 · WordPress plugins & themes · reported by WPScanMedium 6.1
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.
- Product
- EventPrime
- Fixed in
- 3.2.0
- What to do
- Update EventPrime to 3.2.0 or newer.
Oct 31, 2023Memberlite Shortcodes: Does not validate and escape some of its shortcode attributes before outputting them back in the pageCVE-2023-5237 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Memberlite Shortcodes WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
- Product
- Memberlite Shortcodes
- Fixed in
- 1.3.9
- What to do
- Update Memberlite Shortcodes to 1.3.9 or newer.
Full record and what to do →NVD recordresearch.cleantalk.orgwpscan.com
Oct 31, 2023E2Pdf: Does not sanitize and escape some of its settingsCVE-2023-5229 · WordPress plugins & themes · reported by WPScanMedium 4.8
The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
- Product
- E2Pdf
- Fixed in
- 1.20.20
- What to do
- Update E2Pdf to 1.20.20 or newer.
Oct 31, 2023Fattura24: Does not sanitize or escape the 'id' parameter before outputting it back in the pageCVE-2023-5211 · WordPress plugins & themes · reported by WPScanMedium 6.1
The Fattura24 WordPress plugin before 6.2.8 does not sanitize or escape the 'id' parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability.
- Product
- Fattura24
- Fixed in
- 6.2.8
- What to do
- Update Fattura24 to 6.2.8 or newer.
Oct 31, 2023Campaign Monitor Forms by Optin Cat: Does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true"CVE-2023-5098 · WordPress plugins & themes · reported by WPScanHigh 8.1
The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.
- Product
- Campaign Monitor Forms by Optin Cat
- Fixed in
- 2.5.6
- What to do
- Update Campaign Monitor Forms by Optin Cat to 2.5.6 or newer.
Oct 31, 2023WordPress File Sharing: Does not check authorization before displaying files and foldersCVE-2023-4836 · WordPress plugins & themes · reported by WPScanMedium 4.3
The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced
- Product
- WordPress File Sharing
- Fixed in
- 2.0.5
- What to do
- Update WordPress File Sharing to 2.0.5 or newer.
Full record and what to do →NVD recordresearch.cleantalk.orgwpscan.com
Oct 31, 2023WP Meta and Date Remover: Provides an AJAX endpoint for configuring the plugin settingsCVE-2023-4823 · WordPress plugins & themes · reported by WPScanMedium 5.4
The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.
- Product
- WP Meta and Date Remover
- Fixed in
- 2.2.0
- What to do
- Update WP Meta and Date Remover to 2.2.0 or newer.
Oct 31, 2023Popup box: Does not sanitize and escape some Popup fieldsCVE-2023-4390 · WordPress plugins & themes · reported by WPScanMedium 4.8
The Popup box WordPress plugin before 3.7.2 does not sanitize and escape some Popup fields, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup).
- Product
- Popup box
- Fixed in
- 3.7.2
- What to do
- Update Popup box to 3.7.2 or newer.
Oct 31, 2023EventPrime: Does not have CSRF checksCVE-2023-4251 · WordPress plugins & themes · reported by WPScanMedium 4.3
The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.
- Product
- EventPrime
- Fixed in
- 3.2.0
- What to do
- Update EventPrime to 3.2.0 or newer.
Oct 31, 2023EventPrime: Does not sanitise and escape some parameters before outputting them back in the pageCVE-2023-4250 · WordPress plugins & themes · reported by WPScanMedium 6.1
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
- Product
- EventPrime
- Fixed in
- 3.2.0
- What to do
- Update EventPrime to 3.2.0 or newer.
Oct 31, 2023LearnDash LMS: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-28777 · WordPress plugins & themes · reported by PatchstackHigh 8.5
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LearnDash LearnDash LMS allows SQL Injection.This issue affects LearnDash LMS: from n/a through 4.5.3.
- Product
- LearnDash LMS
- Affected
- up to 4.5.3
- What to do
- Affects up to 4.5.3. Update LearnDash LMS to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023RSVPMaker: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-25047 · WordPress plugins & themes · reported by PatchstackMedium 5.5
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3.
- Product
- RSVPMaker
- Affected
- up to 9.9.3
- What to do
- Affects up to 9.9.3. Update RSVPMaker to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023RSVPMaker: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-25045 · WordPress plugins & themes · reported by PatchstackMedium 6.7
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3.
- Product
- RSVPMaker
- Affected
- up to 9.9.3
- What to do
- Affects up to 9.9.3. Update RSVPMaker to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023GamiPress: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-24000 · WordPress plugins & themes · reported by PatchstackHigh 8.2
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through 2.5.7.
- Product
- GamiPress
- Affected
- up to 2.5.7
- What to do
- Affects up to 2.5.7. Update GamiPress to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023Live updates from Excel: Stored Cross-Site ScriptingCVE-2023-5116 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The Live updates from Excel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ipushpull_page' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- Live updates from Excel
- Affected
- up to 2.3.2
- What to do
- Affects up to 2.3.2. Update Live updates from Excel to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023idbbee: Stored Cross-Site ScriptingCVE-2023-5114 · WordPress plugins & themes · reported by WordfenceMedium 5.4
The idbbee plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idbbee' shortcode in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- idbbee
- Affected
- up to 1.0
- What to do
- Affects up to 1.0. Update idbbee to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Oct 31, 2023HTML filter and csv-file search: Local File InclusionCVE-2023-5099 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
- Product
- HTML filter and csv-file search
- Affected
- up to 2.7
- What to do
- Affects up to 2.7. Update HTML filter and csv-file search to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Oct 31, 2023iframe forms: Stored Cross-Site ScriptingCVE-2023-5073 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The iframe forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'iframe' shortcode in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- iframe forms
- Affected
- up to 1.0
- What to do
- Affects up to 1.0. Update iframe forms to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Oct 31, 2023Unauth.CVE-2023-46622 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ollybach WPPizza – A Restaurant Plugin plugin <= 3.18.2 versions.
- Fixed in
- 3.18.3
- What to do
- Update the plugin to 3.18.3 or newer.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023Unauth.CVE-2023-46313 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.4 versions.
- Fixed in
- 7.3.5
- What to do
- Update the plugin to 7.3.5 or newer.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023Unauth.CVE-2023-46312 · WordPress plugins & themes · reported by PatchstackHigh 7.1
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zaytech Smart Online Order for Clover plugin <= 1.5.4 versions.
- Fixed in
- 1.5.5
- What to do
- Update the plugin to 1.5.5 or newer.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023Groundhogg Inc: Auth. (admin+) Stored Cross-Site Scripting (XSS)CVE-2023-40681 · WordPress plugins & themes · reported by PatchstackMedium 5.9
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11.10 versions.
- Product
- Groundhogg Inc
- Fixed in
- 2.7.11.11
- What to do
- Update Groundhogg Inc to 2.7.11.11 or newer.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 31, 2023Jquery accordion slideshow: SQL InjectionCVE-2023-5464 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Jquery accordion slideshow
- Affected
- up to 8.1
- What to do
- Affects up to 8.1. Update Jquery accordion slideshow to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Wp photo text slider 50: SQL InjectionCVE-2023-5439 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Wp photo text slider 50 plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Wp photo text slider 50
- Affected
- up to 8.0
- What to do
- Affects up to 8.0. Update Wp photo text slider 50 to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023wp image slideshow: SQL InjectionCVE-2023-5438 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The wp image slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- wp image slideshow
- Affected
- up to 12.0
- What to do
- Affects up to 12.0. Update wp image slideshow to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023WP fade in text news: SQL InjectionCVE-2023-5437 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- WP fade in text news
- Affected
- up to 12.0
- What to do
- Affects up to 12.0. Update WP fade in text news to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Vertical marquee: SQL InjectionCVE-2023-5436 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Vertical marquee plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 7.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Vertical marquee
- Affected
- up to 7.1
- What to do
- Affects up to 7.1. Update Vertical marquee to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Up down image slideshow gallery: SQL InjectionCVE-2023-5435 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Up down image slideshow gallery
- Affected
- up to 12.0
- What to do
- Affects up to 12.0. Update Up down image slideshow gallery to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Superb slideshow gallery: SQL InjectionCVE-2023-5434 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Superb slideshow gallery
- Affected
- up to 13.1
- What to do
- Affects up to 13.1. Update Superb slideshow gallery to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Message ticker: SQL InjectionCVE-2023-5433 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Message ticker
- Affected
- up to 9.2
- What to do
- Affects up to 9.2. Update Message ticker to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Left right image slideshow gallery: SQL InjectionCVE-2023-5431 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Left right image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Left right image slideshow gallery
- Affected
- up to 12.0
- What to do
- Affects up to 12.0. Update Left right image slideshow gallery to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Jquery news ticker: SQL InjectionCVE-2023-5430 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Jquery news ticker
- Affected
- up to 3.0
- What to do
- Affects up to 3.0. Update Jquery news ticker to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Information Reel: SQL InjectionCVE-2023-5429 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Information Reel
- Affected
- up to 10.0
- What to do
- Affects up to 10.0. Update Information Reel to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Image vertical reel scroll slideshow: SQL InjectionCVE-2023-5428 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Image vertical reel scroll slideshow
- Affected
- up to 9.0
- What to do
- Affects up to 9.0. Update Image vertical reel scroll slideshow to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Image horizontal reel scroll slideshow: SQL InjectionCVE-2023-5412 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Image horizontal reel scroll slideshow
- Affected
- up to 13.2
- What to do
- Affects up to 13.2. Update Image horizontal reel scroll slideshow to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 31, 2023Auth.CVE-2023-46210 · WordPress plugins & themes · reported by PatchstackMedium 5.9
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebCource WC Captcha plugin <= 1.4 versions.
- Affected
- up to 1.4
- What to do
- Affects up to 1.4. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 30, 2023Ads by datafeedr.com: Remote Code ExecutionCVE-2023-5843 · WordPress plugins & themes · reported by WordfenceCritical 9
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function. This allows unauthenticated attackers to execute code on the server. The parameters of the callable function are limited, they cannot be specified arbitrarily.
- Product
- Ads by datafeedr.com
- Affected
- up to 1.1.3
- What to do
- Affects up to 1.1.3. Update Ads by datafeedr.com to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 30, 2023Accordion: Stored Cross-Site ScriptingCVE-2023-5666 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcpaccordion' shortcode in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- Accordion
- Affected
- up to 2.6
- What to do
- Affects up to 2.6. Update Accordion to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 30, 2023WP Simple Galleries: PHP Object InjectionCVE-2023-5583 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserialization of untrusted input from the 'wpsimplegallery_gallery' post meta via 'wpsgallery' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
- Product
- WP Simple Galleries
- Affected
- up to 1.34
- What to do
- Affects up to 1.34. Update WP Simple Galleries to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Oct 30, 2023Simple Shortcodes: Stored Cross-Site ScriptingCVE-2023-5566 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- Simple Shortcodes
- Affected
- up to 1.0.20
- What to do
- Affects up to 1.0.20. Update Simple Shortcodes to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 30, 2023Shortcode Menu: Stored Cross-Site ScriptingCVE-2023-5565 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The Shortcode Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shortmenu' shortcode in versions up to, and including, 3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- Shortcode Menu
- Affected
- up to 3.2
- What to do
- Affects up to 3.2. Update Shortcode Menu to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Oct 30, 2023Carousel, Recent Post Slider and Banner Slider: Stored Cross-Site ScriptingCVE-2023-5362 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spice_post_slider' shortcode in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- Carousel, Recent Post Slider and Banner Slider
- Affected
- up to 2.0
- What to do
- Affects up to 2.0. Update Carousel, Recent Post Slider and Banner Slider to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 30, 2023Buzzsprout Podcasting: Stored Cross-Site ScriptingCVE-2023-5335 · WordPress plugins & themes · reported by WordfenceMedium 6.4
The Buzzsprout Podcasting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'buzzsprout' shortcode in versions up to, and including, 1.8.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Product
- Buzzsprout Podcasting
- Affected
- up to 1.8.4
- What to do
- Affects up to 1.8.4. Update Buzzsprout Podcasting to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 30, 2023Google Maps made Simple: SQL InjectionCVE-2023-5315 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The Google Maps made Simple plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 0.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Product
- Google Maps made Simple
- Affected
- up to 0.6
- What to do
- Affects up to 0.6. Update Google Maps made Simple to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.