High
CVE-2023-4274
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-4645
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
Medium
CVE-2023-5134
Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-5120
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2023-44148
Astra Bulk Edit <= 1.2.7 - Missing Authorization
High
00687370-8374-44cc-8fd1-53b462acd061
iPanorama 360 – WordPress Virtual Tour Builder <= 1.7.3 - Authenticated (Admin+) SQL injection
Medium
CVE-2023-44146
Checkfront Online Booking System <= 3.6 - Cross-Site Request Forgery
Medium
CVE-2023-4774
WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4783
Magee Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4716
Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4388
EventON <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-4821
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5237
Memberlite Shortcodes <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-4819
Shared Files <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-4423
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
d9189eb3-be7f-42e1-92cc-b48af5615eb9
Inactive Logout <= 3.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-44142
Inactive Logout <= 3.2.2 - Missing Authorization
Medium
CVE-2023-44145
Anchor Episodes Index (Spotify for Podcasters) <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44144
Payment gateway per Product for WooCommerce <= 3.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-5050
Leaflet Map <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4861
File Manager Pro – Filester <= 1.8 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4862
File Manager Pro <= 1.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5063
Widget Responsive for Youtube <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4971
Weaver Xtreme Theme Support <= 6.3.0 - Authenticated (Administrator+) PHP Object Injection via Imported File
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.