Medium
CVE-2023-48743
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-6272
Theme My Login 2FA < 1.2 - 2FA Bypass via Brute Force
Medium
CVE-2023-48747
Booster for WooCommerce <= 7.1.2 - Missing Authorization to Product Creation/Modification
Medium
CVE-2023-48280
Consensu.io <= 1.0.3 - Missing Authorization via update_config_db()
Critical
CVE-2023-48738
Porto Theme - Functionality <= 2.11.1 - Unauthenticated SQL Injection
Medium
CVE-2023-4960
WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-48334
League Table <= 1.13 - Cross-Site Request Forgery
Medium
CVE-2023-48282
Taxonomy filter <= 2.2.9 - Cross-Site Request Forgery via taxonomy_filter_save_main_settings()
Medium
CVE-2023-48279
Seraphinite Post .DOCX Source <= 2.16.6 - Cross-Site Request Forgery
High
CVE-2023-48741
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-48289
Import Spreadsheets from Microsoft Excel <= 10.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-40334
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Missing Authorization via woof_meta_get_keys()
Medium
CVE-2023-48322
eDoc Employee Job Application <= 1.13 - Reflected Cross-Site Scripting
High
CVE-2023-48288
WordPress Job Board and Recruitment Plugin – JobWP <= 2.1 - Sensitive Information Exposure
Medium
CVE-2023-48325
Landing Page Builder <= 1.5.1.5 - Open Redirect
Medium
CVE-2023-5949
Simple Social Media Share Buttons <= 3.8.2 - Unauthenticated Password Protected Post Disclosure
Medium
CVE-2023-48318
Contact Form Email <= 1.3.41 - Captcha Bypass
Medium
CVE-2023-48283
Simple Testimonials Showcase <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-48336
Easy Social Icons <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-48740
Easy Social Feed <= 6.5.1 - Missing Authorization via hide_free_sidebar()
Medium
CVE-2023-48287
TextMe SMS <= 1.9.0 - Missing Authorization via tetxme_update_option_page()
Medium
CVE-2023-48281
Broken Link Checker for YouTube <= 1.3 - Cross-Site Request Forgery via plugin_settings_page()
Medium
CVE-2023-48737
TriPay Payment Gateway <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48326
Events Manager <= 6.4.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.