High
CVE-2023-5315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2023-5583
WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2023-5425
Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
High
CVE-2023-5426
Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletion
Critical
CVE-2023-5340
Five Star Restaurant Menu and Food Ordering <= 2.4.10 - Unauthenticated PHP Object Injection
Medium
CVE-2023-5343
Popup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5609
Seraphinite Accelerator <= 2.20.28 - Reflected Cross-Site Scripting via 'rt'
Medium
CVE-2023-5610
Seraphinite Accelerator <= 2.20.28 - Arbitrary Redirect via 'redir'
Medium
CVE-2023-4799
Magic Embeds <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5119
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.27.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-5640
Article Analytics <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2023-4808
WP Post Popup <= 3.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-4970
PubyDoc <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46776
Auto Excerpt everywhere <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2023-4824
WooHoo Newspaper Magazine Theme <= 2.5.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-5140
Bonus for Woo <= 5.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-5509
myStickymenu <= 2.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Lead Deletion
Medium
CVE-2023-46778
Auto Limit Posts Reloaded <= 2.5 - Cross-Site Request Forgery
Medium
CVE-2023-5817
Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-46783
Pre-Orders for WooCommerce <= 1.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-46780
Alter <= 1.0 - Cross-Site Request Forgery
High
CVE-2023-5820
Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2023-46781
Current Menu Item for Custom Post Types <= 1.5 - Cross-Site Request Forgery
Critical
CVE-2023-5652
WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.