Medium
d7d08bfd-9861-4e21-a696-25b00233ad94
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-4757
Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values
Medium
CVE-2023-4838
Simple Download Counter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-41952
Contact Form for Plugin by Fluent Forms <= 5.0.8 - Insecure Direct Object Reference
High
CVE-2023-4536
My Account Page Editor <= 1.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
ee595f48-b72f-4569-a248-7dbd0b9152ae
Easy Form by AYS <= 1.3.8 - Cross-Site Request Forgery
Critical
CVE-2023-4666
Form Maker by 10Web <= 1.15.19 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-51375
EmbedPress <= 3.8.3 - Cross-Site Request Forgery
Medium
CVE-2023-4792
Duplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization to Post Duplication
Medium
CVE-2023-7251
User Submitted Posts <= 20230901 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-41951
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization via export_settings
Medium
CVE-2023-5089
Defender Security <= 4.0.2 - Hide Login Page Feature Protection Bypass
Medium
CVE-2023-41797
Locations <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-41730
SendPress Newsletters <= 1.23.11.6 - Cross-Site Request Forgery
Medium
CVE-2023-28621
Wishful Blog <= 2.0.1 & Raise Mag <= 1.0.7 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-41871
Poll Maker <= 4.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-41865
Slider Pro <= 4.8.6 - Missing Authorization via AJAX actions
Medium
CVE-2023-41852
MailMunch – Grow your Email List <= 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2023-41855
Regpack <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41733
Back To The Top Button <= 2.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41805
Starter Templates <= 3.2.5 - Incorrect Authorization
Medium
CVE-2023-41803
BitPay Checkout for WooCommerce <= 4.1.0 - Missing Authorization
Medium
CVE-2023-41736
Email posts to subscribers <= 6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-4719
Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.