Medium
e34b6ae5-1370-4058-95dd-5686978ca45b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-4386
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
Medium
CVE-2023-4820
PowerPress <= 11.0.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Media URL
Medium
CVE-2023-4796
Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-4945
Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4944
Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4841
Feeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4947
WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update
High
CVE-2023-4402
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
Medium
CVE-2023-4915
WP User Control <= 1.5.3 - Insecure Password Reset Mechanism
Medium
e1dbd0e2-8c6c-4127-b37c-269af3b7f71c
Jetpack CRM <= 5.5.0 - Authenticated (Client+) Stored Cross-Site Scripting
Medium
CVE-2023-4917
Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure
High
d6cbec61-cbe8-44a6-8cc8-8603393ed6b0
WooCommerce Beta Tester < 2.2.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-3869
wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease
High
afd9046c-5b6a-411e-8e66-ff1ba60d7f9d
MultiVendorX <= 4.0.25 - Improper Authorization on REST Routes via 'save_settings_permission'
High
CVE-2023-4153
BAN Users <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update & Privilege Escalation
High
a02f4fc4-42ca-4f8e-9c28-bfa69644e7b6
Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection
Medium
CVE-2023-3998
wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease
High
CVE-2023-4916
Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change
High
CVE-2023-4213
Simplr Registration Form Plus+ <= 2.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Critical
CVE-2023-4488
Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion
Medium
CVE-2023-4271
Photospace Responsive <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
32f2fc21-165c-483f-ab81-48d8f221e4be
Jetpack CRM <= 5.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
32173d38-7f85-4e0c-9b4c-38bee2783d77
Quiz And Survey Master <= 8.1.15 - Cross-Site Request Forgery via 'display_results'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.