Medium
CVE-2023-46148
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-5621
Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title
Medium
CVE-2023-46095
Smooth Scroll Links <= 1.1.0 - Cross-Site Request Forgery
Medium
CVE-2023-46092
Webmaster Tools <= 2.0 - Cross-Site Request Forgery vin lionscripts_plg_f
Medium
CVE-2023-46089
Userback <= 1.0.13 - Cross-Site Request Forgery
High
CVE-2023-46147
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-46151
Product Category Tree <= 2.5 - Cross-Site Request Forgery
Medium
CVE-2023-5181
WP Discord Invite <= 2.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46076
WooCommerce PDF Invoice Builder <= 1.2.103 - Reflected Cross-Site Scripting
Medium
fadc1374-fe4d-414a-af84-1a4de5b89807
404 Solution <= 2.33.0 - Sensitive Information Exposure
High
CVE-2023-5355
Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion
Medium
CVE-2023-5354
Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-46071
Protección de Datos RGPD <= 3.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-5070
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure
Medium
CVE-2023-46074
FreshMail For WordPress <= 2.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-46082
Broken Link Checker | Finder <= 2.4.2 - Missing Authorization via moblc_auth_save_settings
Medium
CVE-2023-5602
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery
Medium
CVE-2023-5454
Templately <= 2.2.5 - Improper Authorization to Arbitrary Post Deletion
Medium
CVE-2023-46083
Contact Form builder with drag & drop - Kali Forms <= 2.3.27 - Missing Authorization via Contact Form
Medium
CVE-2023-5530
Ninja Forms Contact Form <= 3.6.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46070
EG-Attachments <= 2.1.3 - Reflected Cross-Site Scripting via 'paged'
Medium
CVE-2023-46066
Mediabay <= 1.6 - Authenticated (Editor+) Stored Cross-Site Scripting Vulnerability
Medium
CVE-2023-46068
Maileon <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46080
ApplyOnline – Application Form Builder and Manager <= 2.5.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.