Medium
CVE-2023-47649
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-47242
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47648
EazyDocs <= 2.3.5 - Missing Authorization via doc_one_page and edit_doc_one_page
Medium
CVE-2023-47516
Category Post List Widget <= 2.0 - Cross-Site Request Forgery via get_cplw_settings
Medium
CVE-2023-4888
Simple Like Page Plugin <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5076
Ziteboard Online Whiteboard <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ziteboard Shortcode
High
CVE-2023-4297
Mmm Simple File List <= 2.3 - Authenticated (Subscriber+) Directory Traversal
High
CVE-2023-5958
POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-5560
WP-UserOnline <= 2.88.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5974
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
Medium
CVE-2023-5660
SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Low
CVE-2023-5906
Job Manager & Career <= 1.4.3 - Sensitive Information Exposure
Medium
CVE-2023-4514
Mmm Simple File List <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5567
QR Code Tag <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5532
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title
High
CVE-2023-5653
WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored Cross-Site Scripting via IP
Medium
CVE-2023-47668
Restrict Content <= 3.2.7 - Information Exposure via legacy log file
Medium
CVE-2023-5507
ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5975
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax
Medium
CVE-2023-5738
WordPress Backup & Migration <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-4842
Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5664
Garden Gnome Package <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5661
Social Feed <= 1.5.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5709
WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.