Ashv4Ni

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.7.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Reflected XSS.This issue affects Broadcast Live Video: from n/a through 7.3.14.

Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17.

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.8.5.

Missing Authorization vulnerability in WP Desk Autopay dla WooCommerce pay-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autopay dla WooCommerce: from n/a through 2.3.0.

Authenticated attackers with subscriber-level access and above can perform unauthorized actions due to a missing capability check in a function. This issue allows users with low-level privileges to bypass access controls.

Incorrectly configured access control security levels allow authenticated attackers with contributor-level access and above to perform unauthorized actions. This occurs due to a missing capability check in a function.

A Cross-Site Request Forgery (CSRF) flaw exists in the Webriti Wallstreet theme. This issue allows an attacker to induce a user to perform actions they did not intend to do by tricking them into clicking a malicious link or visiting a compromised page.