Medium
CVE-2023-32960
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-33208
Cookie Monster <= 1.51 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-2704
BP Social Connect <= 1.5 - Authentication Bypass
Medium
CVE-2023-2261
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
Medium
CVE-2023-2286
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
Critical
CVE-2023-2733
MStore API <= 3.9.0 - Authentication Bypass
Medium
CVE-2023-2284
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
Medium
CVE-2023-2285
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
Medium
CVE-2023-23900
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting via 'sql_error'
High
CVE-2023-2757
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-2745
WordPress Core < 6.2.1 - Directory Traversal
Low
CVE-2023-2608
Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2023-2568
Photo Gallery by Ays <= 5.1.6 - Reflected Cross-Site Scripting
Medium
bba3eeeb-5e7e-4ec3-9db0-02c44585647a
WordPress Core < 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Embed Discovery
High
CVE-2023-2706
OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation
Medium
CVE-2023-30490
Easing Slider <= 3.0.8 - Missing Authorization to Unauthenticated Settings Reset
Medium
834c92ba-8b48-4ae3-9073-085e8f559762
WordPress Core < 6.2.1 - Insufficient Sanitization of Block Attributes
Medium
CVE-2023-32798
Simple Page Ordering <= 2.5.0 - Missing Authorization to Information Disclosure
Medium
CVE-2023-32959
Multiple sparklewpthemes Themes (Various versions) - Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2023-32961
Zotpress <= 7.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-0431
File Away <= 3.9.9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2584
PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
3baa0543-cdfb-4699-97ca-eaa83c2494a1
Chaty <= 3.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25019
Chaty <= 3.0.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.