yuyudhn

Title	CVE ID	CVSS	Vector	Date
Sunshine Photo Cart <= 2.9.25 - Insecure Direct Object Reference to Order Manipulation	CVE-2023-41796	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	September 5, 2023
SendPress Newsletters <= 1.22.3.31 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-41729	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	September 5, 2023
Rescue Shortcodes <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2023-41728	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	September 5, 2023
SendPress Newsletters <= 1.22.3.31 - Cross-Site Request Forgery	CVE-2023-41730	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 5, 2023
Sermon'e – Sermons Online <= 1.0.0 - Reflected Cross-Site Scripting	CVE-2023-41653	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	September 1, 2023
Typing Effect <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2023-40605	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	August 17, 2023
wp tell a friend popup form <= 7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-25465	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	July 26, 2023
wp tell a friend popup form <= 7.1 - Cross-Site Request Forgery via 'TellAFriend_admin'	CVE-2023-25463	5.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L	July 26, 2023
Pinpoint Booking System <= 2.9.9.3.4 - Content Spoofing	CVE-2023-38520	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	July 20, 2023
Elastic Email Sender <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-38387	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	July 20, 2023
Art Decoration Shortcode <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	CVE-2023-37994	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	July 19, 2023
Shortcode IMDB <= 6.0.8 - Cross-Site Request Forgery	CVE-2023-37892	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	July 11, 2023
Image Social Feed Plugin <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-24412	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	July 7, 2023
Simple Site Verify <= 1.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-36688	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	July 4, 2023
Animated Number Counters <= 1.6 - Authenticated (Editor+) Stored Cross-Site Scripting	CVE-2023-24393	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	July 4, 2023
ApplyOnline – Application Form Builder and Manager <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-24391	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	June 26, 2023
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting	CVE-2023-34017	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	June 23, 2023
Seed Fonts 2.3.1 - Authenticated(Administrator+) Stored Cross-Site Scripting	CVE-2023-35779	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	June 16, 2023
Flo Forms <= 1.0.40 - Authenticated (Administrator+) Stored Cross-Site Scripting	CVE-2023-35095	4.4	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N	June 15, 2023
WP Matterport Shortcode <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	CVE-2023-35094	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	June 15, 2023

Share this researcher's vulnerability discoveries

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation