High
CVE-2023-1895
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-1910
Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint
Critical
CVE-2023-2986
Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass
Medium
64371d43-3acd-4863-80e4-deab071777b9
PowerPress <= 10.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Feed[title]'
Medium
CVE-2022-4115
Editorial Calendar <= 3.8.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via edcal_saveoptions AJAX action
Medium
CVE-2023-2326
Gravity Forms Google Sheet Connector <= 1.3.4 - Cross-Site Request Forgery via verify_code_integation_new
Medium
CVE-2023-0588
Catalyst Connect Zoho CRM Client Portal <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2842
WP Inventory Manager <= 2.1.0.13 - Cross-Site Request Forgery via delete_item
Medium
CVE-2023-2605
WP Brutal AI < 2.0.1 - Reflected Cross-Site Scripting
Medium
c7ab5a00-ce1c-4d74-9192-c9834e2d702d
Visitor Traffic Real Time Statistics <= 6.7 - Missing Authorization to Information Disclosure
Medium
CVE-2023-2795
CodeColorer <= 0.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2624
KiviCare <= 3.2.0 - Reflected Cross-Site Scripting via 'filterType'
High
CVE-2023-2601
WP Brutal AI < 2.0.0 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2023-2743
WP ERP <= 1.12.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-2627
KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Missing Authorization
Medium
CVE-2023-2592
FormCraft Premium <= 3.9.6 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-2482
Responsive CSS EDITOR <= 1.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-2628
KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Cross-Site Request Forgery
Medium
CVE-2023-1166
USM Premium <= 16.2 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2623
KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Sensitive Information Exposure
Medium
CVE-2023-2711
Ultimate Product Catalog <= 5.2.5 - Authenticated(Administrator+) Stored Cross-Site Scripting
High
CVE-2023-2744
WP ERP <= 1.12.3 - Authenticated (Administrator+) SQL Injection via 'type'
Medium
CVE-2023-2178
Aajoda Testimonials <= 2.2.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25453
WordPress Tables <= 1.3.9 - Reflected Cross-Site Scripting via error_msg
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.