Medium
CVE-2023-36501
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-36384
Booking Calendar Contact Form <= 1.2.40 - Reflected Cross-Site Scripting
Medium
CVE-2023-2562
Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox
Medium
CVE-2023-33996
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.10 - Missing Authorization
High
CVE-2023-2229
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id
Medium
CVE-2023-32104
MyCurator Content Curation <= 3.74 - Cross-Site Request Forgery
Medium
CVE-2023-32291
MonsterInsights Pro <= 8.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-35913
OOPSpam Anti-Spam <= 1.1.44 - Cross-Site Request Forgery via empty_ham_entries and empty_spam_entries
Medium
CVE-2023-2701
Gravity Forms <= 2.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-35915
WooCommerce Payments <= 5.9.0 - Authenticated (Shop manager+) SQL Injection via currency parameters
Critical
CVE-2023-2834
BookIt <= 2.3.7 - Authentication Bypass
Medium
CVE-2023-30500
Contact Form by WPForms (Free and Premium) <= 1.8.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-31080
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.65 - Missing Authorization
Medium
CVE-2023-35912
Potent Donations for WooCommerce <= 1.1.9 - Cross-Site Request Forgery in hm_wcdon_admin_page
Medium
CVE-2023-23679
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2023-31213
WPBakery Page Builder for WordPress <= 6.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23678
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 2.2.5 - Authenticated(Administrator+) CSV Injection
High
CVE-2023-3135
Mailtree Log Mail <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-35917
WooCommerce PayPal Payments <= 2.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-35050
Elementor Pro <= 3.13.0 - Missing Authorization
Medium
CVE-2023-3129
URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress <= 1.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-2578
Buy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2026
Image Protector <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2796
EventON <= 2.1 - Missing Authorization to Event Access
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.