Ssl Mixed Content Fix

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-3977 Jul 28, 05:15 MEDIUM POC PATCH This Month

Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

WordPress CSRF Social Media Share Buttons Social Sharing Icons Backup Migration Clone +13

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2023-0958 Jul 28, 05:15 MEDIUM PATCH This Month

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Social Media Share Buttons Social Sharing Icons Backup Migration Clone +14

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2023-3977

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

WordPress CSRF Social Media Share Buttons Social Sharing Icons +15

NVD

CVE-2023-0958

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

WordPress Authentication Bypass Social Media Share Buttons Social Sharing Icons +16

NVD