CVEs published July 1, 2023
38 CVEs were published on July 1, 2023: 0 critical, 1 high.
- Published
- 38
- Critical
- 0
- High
- 1
- Medium
- 37
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- implecode eCommerce Product Catalog Plugin for WordPress
- 2
- wpopal Opal Estate
- 2
- 10up ElasticPress
- 1
- ajay Better Search – Relevant search results for WordPress
- 1
- analogwp Style Kits – Advanced Theme Styles for Elementor,…
- 1
- brainstormforce CartFlows – Funnel Builder & Checkout Plugi…
- 1
- brainstormforce Import / Export Customizer Settings
- 1
- brainstormforce Lightweight Sidebar Manager
- 1
- cneumann Multiple Roles
- 1
- dokaninc Dokan: AI Powered WooCommerce Multivendor Marketpl…
- 1
High 1
Medium, low and unrated 37
- CVE-2020-36749Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypassghuger Easy Testimonials
- CVE-2021-4405ElasticPress <= 3.5.3 - Cross-Site Request Forgery Bypass10up ElasticPress
- CVE-2021-4404Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypasseventespresso Event Espresso – Event Registration & Ticketi…
- CVE-2021-4403Remove Schema <= 1.5 - Cross-Site Request Forgery Bypasstimvaniersel Remove Schema
- CVE-2020-36748Dokan <= 3.0.8 - Cross-Site Request Forgery Bypassdokaninc Dokan: AI Powered WooCommerce Multivendor Marketpl…
- CVE-2021-4402Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypasscneumann Multiple Roles
- CVE-2020-36747Lightweight Sidebar Manager <= 1.1.4 - Cross-Site Request Forgery Bypassbrainstormforce Lightweight Sidebar Manager
- CVE-2021-4400Better Search <= 2.5.2 - Cross-Site Request Forgery Bypassajay Better Search – Relevant search results for WordPress
- CVE-2021-4399Edwiser Bridge <= 2.0.6 - Cross-Site Request Forgery Bypasswisdmlabs Edwiser Bridge – WordPress Moodle Integration
- CVE-2021-4398Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypassmilmor Amministrazione Trasparente
- CVE-2021-4397Staff Directory Plugin <= 3.6 - Cross-Site Request Forgery Bypassrichardgabriel Staff Directory Plugin: Company Directory
- CVE-2021-4396Rucy <= 0.4.4 - Cross-Site Request Forgery Bypassgips-nita Rucy
- CVE-2020-36746Menu Swapper <= 1.1.0.2 - Cross-Site Request Forgery Bypasssevenspark Menu Swapper
- CVE-2021-4395Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypassvillatheme Abandoned Cart Recovery for WooCommerce
- CVE-2023-26136Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using Cookitough-cookie
- CVE-2021-4388Opal Estate <= 1.6.11 - Missing Authorizationwpopal Opal Estate
- CVE-2020-36745WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypasswedevs Project Manager – AI Powered Project Management, Tas…
- CVE-2020-36744NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypasswpdevteam NotificationX – FOMO, Live Sales Notification, Wo…
- CVE-2021-4394Locations <= 3.2.1 - Cross-Site Request Forgery Bypassrichardgabriel Locations
- CVE-2020-36743Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypassimplecode Product Catalog Simple
- CVE-2020-36742Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypasshiroaki-miyashita Custom Field Template
- CVE-2021-4392eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypassimplecode eCommerce Product Catalog Plugin for WordPress
- CVE-2021-4391Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypasswpswings Ultimate Gift Cards for WooCommerce
- CVE-2020-36741MultiVendorX – MultiVendor Marketplace Solution For WooCommerce <= 3.5.7 - Cross-Site Request Forgery Bypasswcmp MultiVendorX – WooCommerce Multivendor Marketplace Sol…
- CVE-2021-4390Contact Form 7 Style <= 3.2 - Cross-Site Request Forgery Bypassionuticlanzan Contact Form 7 Style
- CVE-2021-4389WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypasswptravel WP Travel – Ultimate Travel Booking System, Tour M…
- CVE-2020-36740Radio Buttons for Taxonomies <= 2.0.5 - Cross-Site Request Forgery Bypasshelgatheviking Radio Buttons for Taxonomies
- CVE-2021-4393eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypassimplecode eCommerce Product Catalog Plugin for WordPress
- CVE-2021-4387Opal Estate <= 1.6.11 - Cross-Site Request Forgery Bypasswpopal Opal Estate
- CVE-2021-4386WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypassflippercode WP Security Question
- CVE-2021-4385WP Private Content Plus <= 3.1 - Cross-Site Request Forgery Bypassnimeshrmr WP Private Content Plus
- CVE-2020-36739Feed Them Social – Page, Post, Video, and Photo Galleries <= 2.8.6 - Cross-Site Request Forgery Bypassslickremix Feed Them Social – Social Media Feeds, Video, an…
- CVE-2020-36738Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypassnarinder-singh Cool Timeline
- CVE-2020-36737Import / Export Customizer Settings <= 1.0.3 - Cross-Site Request Forgery Bypassbrainstormforce Import / Export Customizer Settings
- CVE-2021-4384WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypassorigincode WordPress Photo Gallery – Image Gallery
- CVE-2020-36736WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypassbrainstormforce CartFlows – Funnel Builder & Checkout Plugi…
- CVE-2020-36735WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypasswedevs ERP: Complete HR, Accounting & CRM Suite with WooCom…