Medium
CVE-2023-6555
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-6042
Getwid – Gutenberg Blocks <= 2.0.2 - Improper Input Validation to Arbitrary Email Sending to Admin
Medium
CVE-2023-6561
Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text
High
CVE-2023-6827
Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-6529
WP VR <= 8.3.14 - Missing Authorization to Plugin Version Downgrade
Medium
CVE-2023-50375
Google Language Translator <= 6.0.19 - Missing Authorization via admin notifications
Medium
CVE-2023-6383
Debug Log Manager <= 2.2.2 - Directory Listing to Sensitive Information Disclosure
Medium
CVE-2023-6161
WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting
High
CVE-2023-6826
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2023-6636
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-6637
CAOS | Host Google Analytics Locally <= 4.7.14 - Missing Authorization to Unauthenticated Plugin Settings Update
High
CVE-2023-6558
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload
Medium
CVE-2023-6000
Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-6037
WP TripAdvisor Review Slider <= 11.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5877
affiliate-toolkit <= 3.4.2 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2023-6624
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2023-6553
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Medium
CVE-2023-6845
CommentTweets <= 0.6 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-51548
SlickNav Mobile Menu <= 1.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6583
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
Medium
a7cf1c70-9778-4b50-b494-d0b1d0277b35
EmbedPress <= 3.9.4 - Missing Authorization
Medium
CVE-2023-6120
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2023-5756
Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action
Medium
CVE-2023-6485
Html5 Video Player <= 2.5.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.