Medium
e8596412-53d5-45ed-998a-49799bd269d0
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
b0eb165f-c979-4318-8362-ca47500ed845
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization on multiple AJAX actions
Medium
50f69182-66c0-4d3a-aabe-015b72937f3e
WP Social AutoConnect <= 4.6.1 - Cross-Site Request Forgery via jfb_admin_page
High
CVE-2023-36677
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-36691
WebwinkelKeur <= 3.24 - Cross-Site Request Forgery
Medium
CVE-2023-34377
My Content Management <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
9854d09a-2fab-46e6-9fc1-ff6d68df2662
Request a Quote <= 2.3.10 - Cross-Site Request Forgery
Medium
CVE-2023-36689
WPFactory Helper <= 1.5.2 - Reflected Cross-Site Scripting via item_slug
Medium
CVE-2023-23823
Enhanced Text Widget <= 1.5.8 - Missing Authorization
Medium
6309c706-f84a-4997-9a9b-1bd8cf8f711a
Knowledge Center <= 2.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2023-36530
SP Project & Document Manager <= 4.67 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
296f15eb-0782-4351-a2c5-c8ef6f005352
TrustProfile <= 3.24 - Cross-Site Request Forgery
Critical
CVE-2023-3249
Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass
High
CVE-2023-3063
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Critical
CVE-2023-3460
Ultimate Member <= 2.6.6 - Privilege Escalation via Arbitrary User Meta Updates
High
CVE-2023-3343
User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-23798
Layer Slider <= 1.1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-3447
Active Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection
Medium
CVE-2023-25471
WCP OpenWeather <= 2.5.0 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2023-36531
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.68 - Missing Authorization via activate_addon
Medium
CVE-2023-1602
Short URL <= 1.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-36381
Zippy <= 1.6.5 - Authenticated(Author+) PHP Object Injection via unzipPosts
High
CVE-2022-46860
Short URL <= 1.6.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-36527
Post to CSV by BestWebSoft <= 1.4.0 - Authenticated (Author+) CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.