Medium
CVE-2023-47828
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-47833
Theater for WordPress <= 0.18.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Low
CVE-2023-47826
Restaurant & Cafe Addon for Elementor <= 1.5.3 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-47837
ARMember <= 4.0.10 - Authenticated (Subscriber+) Membership Plan Bypass
Medium
CVE-2023-47819
Easy Call Now by ThikShare <= 1.1.0 - Cross-Site Request Forgery via settings_page
Medium
CVE-2023-47774
Jetpack < 12.7 - Authenticated(Contributor+) Clickjacking via Iframe Injection
Medium
CVE-2023-47830
Live Preview for Contact Form 7 <= 1.2.0 - Missing Authorization via update_option
Medium
CVE-2023-47791
Leadster <= 1.1.2 - Cross-Site Request Forgery via leadster_script_code_action
Medium
CVE-2023-45050
Jetpack <= 12.8-a.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute
Medium
CVE-2023-47825
WP EXtra <= 6.4 - Cross-Site Request Forgery ToolImport
Medium
CVE-2023-47824
Legal Pages <= 1.3.8 - Cross-Site Request Forgery via moveToTrash and fetch_and_insert_template_data
Medium
CVE-2023-47829
Quick Call Button <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-47807
10WebAnalytics <= 1.2.12 - Missing Authorization via gawd_wd_bp_install_notice_status
Medium
CVE-2023-6077
Ultimate Responsive Image Slider <= 3.5.11 - Missing Authorization via AJAX action
Medium
CVE-2023-47834
Quiz And Survey Master <= 8.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-6187
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-47818
LWS Hide Login <= 2.1.8 - Protection Mechanism Bypass
High
CVE-2023-4214
AppPresser <= 4.2.5 - Insecure Password Reset Mechanism
Medium
CVE-2023-47832
SearchIQ <= 4.4 - Missing Authorization via getSIQPluginSettings
Medium
CVE-2023-47823
FormCraft <= 1.2.7 - Missing Authorization via formcraft_nag_update
Medium
CVE-2023-39925
Community by PeepSo <= 6.1.6.0 - Cross-Site Request Forgery via delete
Medium
CVE-2023-47809
Accordion <= 2.6 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings
Medium
CVE-2023-4690
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
Critical
CVE-2023-38399
Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.