Medium
CVE-2023-46199
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-46191
Open Graph Metabox <= 1.4.4 - Cross-Site Request Forgery
High
3bcd61d4-4775-4297-b7f5-664991fcd6d2
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby
High
CVE-2023-5336
iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2023-46189
Google Calendar Events <= 3.2.5 - Cross-Site Request Forgery via bulk_actions
Medium
CVE-2023-46200
Smart App Banner <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46198
Appointment Calendar <= 2.9.6 - Cross-Site Request Forgery
Medium
f709fca2-b7b6-4567-8055-1156f510d1ca
Envo Extra <= 1.8.3 - Cross-Site Request Forgery
Medium
CVE-2023-46188
Freesoul Deactivate Plugins <= 2.1.3 - Cross-Site Request Forgery via eos_dp_pro_delete_transient
High
CVE-2023-46149
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2023-46154
E2Pdf <= 1.20.18 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-46093
Webmaster Tools <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-46145
Themify Ultra <= 7.3.5 - Privilege Escalation
High
CVE-2023-5538
MpOperationLogs <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-46088
WP Full Stripe Free <= 7.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-46153
User Feedback <= 1.0.9 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-46090
Spider Facebook <= 1.0.15 - Reflected Cross-Site Scripting
Medium
CVE-2023-46146
Themify Ultra <= 7.3.5 - Missing Authorization
Medium
CVE-2023-5615
Skype Legacy Buttons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44999
Stripe Gateway <= 7.6.0 - Cross-Site Request Forgery
Medium
CVE-2023-46152
WOLF <= 1.0.7.1 - Cross-Site Request Forgery
Medium
CVE-2023-46150
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Cross-Site Request Forgery
Medium
CVE-2023-46094
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-46091
Category SEO Meta Tags <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.