Vulnerabilities

TI-2023-15881 CVE-2023-32599 · GHSA-gpwq-qppr-7c5w

WordPress reCAPTCHA for all plugin <= 1.22 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Bill Minozzi reCAPTCHA for all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects reCAPTCHA for all: from n/a through 1.22.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0047 Published 2024-12-13 No fix listed CWE-862

TI-2022-21245 CVE-2022-43453 · GHSA-8969-qjjh-m9jj

WordPress WP Tools plugin <= 3.41 - Auth. Broken Access Control vulnerability

MEDIUM 40

Missing Authorization vulnerability in Bill Minozzi WP Tools.This issue affects WP Tools: from n/a through 3.41.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00469 Published 2024-06-21 No fix listed CWE-862

TI-2024-03920 CVE-2024-4214 · GHSA-f4c4-g4g8-j6f6

WordPress cardealer plugin <= 4.15 - Content Injection vulnerability

LOW 14

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Bill Minozzi Car Dealer allows Code Injection.This issue affects Car Dealer: from n/a through 4.15.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.0037 Published 2024-05-17 No fix listed CWE-80

TI-2024-01733 CVE-2024-1861 · GHSA-gpw4-cp4w-g7v7

Missing authorization in sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback…

LOW 20

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00361 Published 2024-02-28 No fix listed CWE-862

TI-2024-01732 CVE-2024-1860 · GHSA-w6wm-9q8x-p5h7

Missing authorization in sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback…

LOW 35

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_a…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00375 Published 2024-02-28 No fix listed CWE-862

TI-2023-27763 CVE-2023-50858 · GHSA-3gj6-gfv8-qhwj

WordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Ping…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00196 Published 2023-12-28 No fix listed CWE-352

TI-2023-15778 CVE-2023-32496 · GHSA-gwg2-8c92-5859

WordPress StopBadBots Plugin <= 7.31 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin <= 7.31 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-23 No fix listed CWE-79

TI-2021-07145 CVE-2021-24863 · GHSA-7pv6-jghj-vwmc

StopBadBots < 6.67 - Unauthenticated SQL Injection

MEDIUM 45

The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before using it in a SQL statement to save it, lead…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01627 Published 2021-12-13 Fixed in 6.67 CWE-89

TI-2021-07009 CVE-2021-24727 · GHSA-68gc-6j2c-jr3m

Block and Stop Bad Bots < 6.60 - Authenticated SQL Injections

MEDIUM 41

The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injections

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01713 Published 2021-09-13 Fixed in 6.60 CWE-89

Vulnerabilities

Filters