Critical
CVE-2023-5340
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-5343
Popup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5609
Seraphinite Accelerator <= 2.20.28 - Reflected Cross-Site Scripting via 'rt'
Medium
CVE-2023-5610
Seraphinite Accelerator <= 2.20.28 - Arbitrary Redirect via 'redir'
Medium
CVE-2023-4799
Magic Embeds <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5119
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.27.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-5640
Article Analytics <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2023-4808
WP Post Popup <= 3.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-4970
PubyDoc <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46776
Auto Excerpt everywhere <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2023-4824
WooHoo Newspaper Magazine Theme <= 2.5.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-5140
Bonus for Woo <= 5.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-5509
myStickymenu <= 2.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Lead Deletion
Medium
CVE-2023-46778
Auto Limit Posts Reloaded <= 2.5 - Cross-Site Request Forgery
Medium
CVE-2023-5817
Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-46783
Pre-Orders for WooCommerce <= 1.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-46780
Alter <= 1.0 - Cross-Site Request Forgery
High
CVE-2023-5820
Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2023-46781
Current Menu Item for Custom Post Types <= 1.5 - Cross-Site Request Forgery
Critical
CVE-2023-5652
WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection
Medium
CVE-2023-5821
Thumbnail carousel slider <= 1.0 - Cross-Site Request Forgery to Mass Slider Deletion
Critical
CVE-2023-6030
LogDash Activity Log <= 1.1.3 - Unauthenticated SQL Injection
Medium
CVE-2023-46777
Feather Login Page <= 1.1.3 - Cross-Site Request Forgery
Medium
CVE-2023-5802
WP Knowledgebase <= 1.3.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.