Critical
CVE-2023-47873
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
42b2d840-4e8b-4027-ab3b-78b17c9ed9aa
Floating Action Button <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2023-47870
wpForo Forum <= 2.2.8 - Cross-Site Request Forgery via logout()
Medium
CVE-2023-47851
Bootstrap Shortcodes Ultimate <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47844
Grab & Save <= 1.0.4 - Reflected Cross-Site Scripting
High
CVE-2023-6035
EazyDocs <= 2.3.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-47849
BlossomThemes Email Newsletter <= 2.2.4 - Missing Authorization
High
CVE-2023-47842
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
Medium
17453fa5-af14-477b-9b3d-b245511ad8ce
Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery
High
CVE-2023-5674
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id
Critical
CVE-2023-47868
wpForo Forum <= 2.2.3 - Unauthenticated Privilege Escalation
Medium
c6e2710f-f51a-487d-a4bb-a19f614ff254
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via manual review reminders
Medium
b243722e-6510-48bd-be26-95ccbe79fa57
Customer Reviews for WooCommerce <= 5.38.1 - Cross-Site Request Forgery via manual review reminders
Medium
CVE-2023-48300
Embed Privacy <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51691
wpDiscuz <= 7.6.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6197
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Settings Modifcation and Stored Cross-Site Scripting
Medium
CVE-2023-5749
EmbedPress <= 3.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-5750
EmbedPress <= 3.9.1 - Reflected Cross-Site Scripting
High
CVE-2023-6196
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2023-47836
WP Meta and Date Remover <= 2.3.0 - Cross-Site Request Forgery via updateSettings
Medium
CVE-2023-47835
ARI Stream Quiz <= 1.2.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47788
Jetpack <= 12.6.2 - Improper Authorization via WPCom External Media REST endpoints
Medium
CVE-2023-47831
DrawIt (draw.io) <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-5605
URL Shortify <= 1.7.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.