Medium
CVE-2023-52178
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-6447
EventPrime <= 3.3.5 - Missing Authorization to Private Event Disclosure
High
CVE-2023-7082
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-52182
ARI Stream Quiz <= 1.3.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2023-52185
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File
High
CVE-2023-52180
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 - Authenticated(Contributor+) SQL Injection
High
CVE-2023-52133
Most And Least Read Posts Widget <=2.5.16 - Authenticated(Contributor+) SQL Injection via Widget settings
Medium
CVE-2023-52123
Strong Testimonials <= 3.1.10 - Cross-Site Request Forgery
Medium
CVE-2023-52121
NitroPack <= 1.10.2 - Cross-Site Request Forgery
Medium
CVE-2023-6626
Product Enquiry for WooCommerce <= 3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-52118
WP User Profile Avatar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-52142
Events Shortcodes & Templates For The Events Calendar <= 2.3.1 - Authenticated (Contributor+) SQL Injection via shortcode
Medium
CVE-2023-52148
Affiliates Manager <= 2.9.30 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52120
NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-52135
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-52134
GEO my WordPress <= 4.0.2 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-49777
YITH WooCommerce Product Add-Ons <= 4.3.0 - Authenticated(Shop Manager+) PHP Object Injection
Low
CVE-2023-52144
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2023-52150
Dynamic Content for Elementor < 2.12.5 - Cross-Site Request Forgery
Medium
CVE-2023-52130
Affiliates Manager <= 2.9.31 - Cross-Site Request Forgery via multiple AJAX actions
Medium
CVE-2023-52131
Page Generator <= 1.7.1 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-52146
404 Solution <= 2.33.0 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52117
ProfileGrid <= 5.6.6 - Missing Authorization
Medium
CVE-2023-52125
iFrame <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via srcdoc
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.