cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2023-0958,https://securityvulnerability.io/vulnerability/CVE-2023-0958,Unauthorized Plugin Installation in WordPress Plugins by Inisev,"Multiple WordPress plugins developed by Inisev are susceptible to a critical weakness that permits authenticated users, even those with minimal permissions, such as subscribers, to install specific plugins without proper authorization. This arises from a lack of capability verification in the function handling plugin installations, leading to potential exploitation and unauthorized control over affected sites. It is crucial for users of these plugins to take immediate action to secure their installations and prevent unwanted access.",Wordpress,"Ssl Mixed Content Fix,Duplicate Post,Social Share Icons & Social Share Buttons,Ultimate Posts Widget,Backup Migration,Pop-up,Redirection,Clone,Social Media Share Buttons & Social Sharing Icons,Rss Redirect & Feedburner Alternative,Enhanced Text Widget",4.3,MEDIUM,0.001449999981559813,false,,false,false,false,,false,false,2023-07-28T05:15:00.000Z,0
CVE-2023-3977,https://securityvulnerability.io/vulnerability/CVE-2023-3977,Cross-Site Request Forgery Vulnerability in Inisev WordPress Plugins,"Multiple Inisev plugins for WordPress are susceptible to Cross-Site Request Forgery attacks due to a missing nonce verification in the handle_installation function. This vulnerability enables unauthorized attackers to force plugin installations by tricking an admin into clicking a malicious link, thus executing forged requests. Affected plugins include Feedburner Alternative and RSS Redirect, Ultimate Social Media Icons, and several others. It is crucial for site administrators to be vigilant about potential social engineering tactics that exploit this flaw.",Wordpress,"SSL Mixed Content Fix,Duplicate Post,Social Share Icons & Social Share Buttons,Ultimate Posts Widget,Backup Migration,Pop-up,Redirection,Clone,Social Media Share Buttons & Social Sharing Icons,RSS Redirect & Feedburner Alternative,Enhanced Text Widget",4.3,MEDIUM,0.001829999964684248,false,,false,false,false,,false,false,2023-07-28T05:15:00.000Z,0