Medium
CVE-2023-5387
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-5416
Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion
Medium
CVE-2023-5411
Funnelforms Free <= 3.4 - Missing Authorization to Post Modification
Medium
CVE-2023-5382
Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion
Medium
CVE-2023-5415
Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation
Medium
CVE-2023-5419
Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending
Medium
413d3ec0-8d04-4bef-9394-f666cfed733e
UsersWP <= 1.2.3.22 - Cross-Site Request Forgery
Medium
CVE-2023-5386
Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion
High
CVE-2023-5822
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-5417
Funnelforms Free <= 3.4 - Missing Authorization to Category Update
High
CVE-2023-5860
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-4247
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation
Medium
CVE-2023-4246
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation
High
CVE-2023-47179
WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update
Medium
88163d55-ab97-4697-a25b-d54615e2a843
Solid Security Basic <= 9.0.0 - Unauthenticated Login Page Disclosure
High
CVE-2023-47180
Finale Lite <= 2.16.0 - Missing Authorization to Content Deletion
Critical
CVE-2023-47178
The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47177
Linker <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4823
WP Meta and Date Remover < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-47184
Admin Bar & Dashboard Control <= 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47181
IdeaPush <= 8.52 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4248
GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion
Medium
CVE-2023-47182
Login Screen Manager <= 3.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-4686
WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.