| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2023-3720 | Upload Media By URL < 1.0.8 - Stored XSS via CSRF | Unknown | Upload Media By URL | 中危 | - | 2023-08-30 14:22:00 | Deep Dive |
| CVE-2023-3356 | Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS | Unknown | Subscribers Text Counter | 中危 | - | 2023-08-30 14:22:00 | Deep Dive |
| CVE-2023-3604 | Change WP Admin < 1.1.4 - Secret Login Page Disclosure | Unknown | Change WP Admin Login | 高危 | - | 2023-08-21 12:29:51 | Deep Dive |
| CVE-2023-3366 | MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF | Unknown | MultiParcels Shipping For WooCommerce | 中危 | - | 2023-08-21 12:29:50 | Deep Dive |
| CVE-2023-3936 | Blog2Social < 7.2.1 - Reflected XSS | Unknown | Blog2Social: Social Media Auto Post & Scheduler | 中危 | - | 2023-08-21 12:29:50 | Deep Dive |
| CVE-2023-3954 | MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS | Unknown | MultiParcels Shipping For WooCommerce | 中危 | - | 2023-08-21 12:29:49 | Deep Dive |
| CVE-2023-3667 | Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting | Unknown | Chat Button: WhatsApp Chat, Facebook Messenger, Telegram Chat, WeChat, Line Chat, Discord Chat for Customer Support Chat with floating Chat Widget | 中危 | - | 2023-08-21 12:29:48 | Deep Dive |
| CVE-2023-0551 | REST API TO MiniProgram <= 4.6.1 - Subscriber+ Attachment Deletion | Unknown | REST API TO MiniProgram | 中危 | - | 2023-08-16 11:03:30 | Deep Dive |
| CVE-2023-2254 | Ko-fi Button < 1.3.3 - Admin+ Stored XSS | Unknown | Ko-fi Button | 中危 | - | 2023-08-16 11:03:30 | Deep Dive |
| CVE-2023-1977 | Booking Manager < 2.0.29 - Subscriber+ SSRF | Unknown | Booking Manager | 高危 | - | 2023-08-16 11:03:29 | Deep Dive |
| CVE-2023-1465 | WP EasyPay < 4.1 - Reflected Cross-Site Scripting | Unknown | WP EasyPay | 中危 | - | 2023-08-16 11:03:28 | Deep Dive |
| CVE-2023-0274 | URL Params < 2.5 - Contributor+ Stored XSS | Unknown | URL Params | 中危 | - | 2023-08-16 11:03:27 | Deep Dive |
| CVE-2023-1110 | Yellow Yard < 2.8.12 - Contributor+ Stored XSS | Unknown | Yellow Yard Searchbar | 中危 | - | 2023-08-16 11:03:26 | Deep Dive |
| CVE-2023-2225 | SEO ALert <= 1.59 - Admin+ Stored XSS | Unknown | SEO ALert | 中危 | - | 2023-08-16 11:03:25 | Deep Dive |
| CVE-2023-2272 | Tiempo.com <= 0.1.2 - Reflected XSS | Unknown | Tiempo.com | 中危 | - | 2023-08-16 11:03:24 | Deep Dive |
| CVE-2023-0058 | Tiempo.com <= 0.1.2 - Stored XSS via CSRF | Unknown | Tiempo.com | 中危 | - | 2023-08-16 11:03:24 | Deep Dive |
| CVE-2023-2271 | Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF | Unknown | Tiempo.com | 中危 | - | 2023-08-16 11:03:23 | Deep Dive |
| CVE-2023-2123 | WP Inventory Manager < 2.1.0.13 - Reflected Cross-Site Scripting | Unknown | WP Inventory Manager | 中危 | - | 2023-08-16 11:03:22 | Deep Dive |
| CVE-2023-0579 | YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi | Unknown | YARPP | 高危 | - | 2023-08-16 11:03:21 | Deep Dive |
| CVE-2022-4782 | ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode | Unknown | ClickFunnels | 中危 | - | 2023-08-16 11:03:20 | Deep Dive |