Medium
CVE-2023-2305
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-32592
Sunny Search <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-32578
Column-Matic <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23871
Button <= 1.1.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32092
Community by PeepSo <= 6.0.9.0 - Cross-Site Request Forgery to Field Duplication
Medium
CVE-2023-32603
Donations Made Easy – Smart Donations <= 4.0.12 - Reflected Cross-Site Scripting
Low
CVE-2023-2599
Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2023-32594
Hyphenator <= 5.1.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-32596
weebotLite <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-23819
itemprop WP for SERP/SEO Rich snippets <= 3.5.201706131 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32587
WP Reactions Lite <= 1.3.8 - Cross-Site Request Forgery via AJAX action
High
CVE-2023-2484
Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-32575
Product page shipping calculator for WooCommerce <= 1.3.25 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-2634
Get Your Number <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32588
Post State Tags <= 2.0.6 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-32598
Featured Image Pro Post Grid <= 5.14 - Reflected Cross-Site Scripting via page
Medium
CVE-2023-24394
iframe popup <= 3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-23818
WP Register Profile With Shortcode <= 3.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-33333
Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via run_sync
Medium
CVE-2023-32602
CALL ME NOW <= 3.0 - Cross-Site Request Forgery
Medium
CVE-2023-32239
WoodMart <= 7.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2023-32242
Woodmart Core <= 1.0.36 - PHP Object Injection
Critical
CVE-2023-32243
Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-32576
Locatoraid Store Locator <= 3.9.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.