Medium
CVE-2023-46775
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-5799
WP Hotel Booking <= 2.0.8 - Insufficient Authorization to Unauthorized Post Deletion
Medium
CVE-2023-46779
EasyRecipe <= 3.5.3251 - Cross-Site Request Forgery
Medium
CVE-2023-5774
Animated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5815
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
Medium
CVE-2023-46634
Custom My Account for Woocommerce <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-46633
Glossary <= 3.1.2 - Missing Authorization
High
f1cbe675-4c0f-430a-b2db-85ba8605d172
Deeper Comments <= 2.1.1 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Options Update
Medium
CVE-2023-46631
Product Recommendation Quiz for eCommerce <= 2.1.0 - Missing Authorization in prq_set_token
Medium
CVE-2023-40681
Groundhogg <= 2.7.11.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via Task Data
Medium
CVE-2023-46618
Category SEO Meta Tags <= 2.5 - Cross-Site Request Forgery via csmt_admin_options
Medium
CVE-2023-46638
WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery
Medium
d3343d96-ca52-46a6-b464-cd2e5375d10f
Fathom Analytics <= 3.0.7 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46622
WPPizza <= 3.18.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-32298
Simple User Listing <= 1.9.2 - Reflected Cross-Site Scripting via as
Medium
CVE-2023-46620
DeepL Pro API translation <= 2.4.1.1 - Cross-Site Request Forgery via wpdeepl_prune_logs
Medium
CVE-2023-46626
FLOWFACT WP Connector <= 2.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-47230
Contact Forms by Cimatti <= 1.6.0 - Cross-Site Request Forgery via accua_forms_list_page_table
Medium
CVE-2023-46619
Spider Facebook <= 1.0.15 - Cross-Site Request Forgery
Medium
CVE-2023-46644
WordPress CTA <= 1.5.8 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-46624
Parcel Pro <= 1.6.11 - Open Redirect via 'redirect'
Medium
CVE-2023-5314
WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
Medium
CVE-2023-46635
YITH WooCommerce Product Add-Ons <= 4.2.0 - Missing Authorization
Medium
CVE-2023-32299
Ni WooCommerce Sales Report <= 3.7.3 - Missing Authorization via ajax_sales_order
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.