Medium
CVE-2023-50844
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-50848
404 Solution <= 2.34.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50849
E2Pdf <= 1.20.23 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-6855
Paid Memberships Pro <= 2.12.5 - Missing Authorization via API
Medium
CVE-2023-6941
Keap Official Opt-in Forms <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50836
HTML Forms <= 1.3.28 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-6924
Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
Medium
CVE-2023-6991
JSM file_get_contents() Shortcode <= 2.7.0 - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
Medium
CVE-2023-4925
Easy Forms for Mailchimp <= 6.8.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50843
Clockwork SMS Notfications <= 3.0.4 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-6934
Limit Login Attempts Reloaded <= 2.25.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50829
Loan Repayment Calculator and Application Form <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-47527
WP Edit Username <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50835
Advanced Category Template <= 0.1 - Cross-Site Request Forgery
Medium
CVE-2023-50377
Simple Counter <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50823
CSS & JavaScript Toolbox <= 11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-7198
WP Dashboard Notes <= 1.0.10 - Insecure Direct Object References to Authenticated Private Note Deletion
Medium
CVE-2023-50832
Multi Step Form <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50825
iframe Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47525
Event Management Tickets Booking <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50831
CURCY – Multi Currency for WooCommerce <= 2.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50830
Seos Contact Form <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50833
Colibri Page Builder <= 1.0.240 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50822
Currency Converter Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.