Medium
CVE-2023-23667
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-32508
Order Your Posts Manually <= 2.2.5 - Authenticated (Administrator+) SQL Injection via 'sortdata'
Medium
CVE-2023-32506
Link Whisper Free <= 0.6.3 - Missing Authorization via init()
Medium
CVE-2022-44633
YITH WooCommerce Gift Cards Premium <= 3.23.1 - Missing Authorization
Medium
CVE-2023-2224
SEO By 10Web <= 1.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
1a6bc58f-9cf3-4d3f-a10e-0ccde0b890a3
Injection Guard <= 1.2.1 - Cross-Site Request Forgery to Whitelist Update
Medium
CVE-2023-32520
WCP Contact Form <= 3.1.0 - Missing Authorization via downloadCsv
High
CVE-2023-32511
Booking Ultra Pro <= 1.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-28749
CM On Demand Search And Replace <= 1.3.0 - Cross-Site Request Forgery
Low
CVE-2023-32497
Block Referer Spam <= 1.1.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
f68ac2b8-33dc-4cc2-b0f3-8777450e39f9
Pro Mime Types - Manage file media types <= 1.0.7 - Cross-Site Request Forgery via pmt_settings_section_callback_tab_1
Critical
CVE-2022-47586
Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id
Medium
CVE-2023-27923
VK Blocks <= 1.53.0.1 - Stored (Contributor+) Cross-Site Scripting in Tag Edit
Medium
CVE-2023-24409
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
Medium
CVE-2023-2399
QuBotChat <= 1.1.5 - Unauthenticated Self-Based Cross-Site Scripting
High
CVE-2023-32121
Zero Spam <= 5.4.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-32126
SALERT <= 1.2.1 - Missing Authorization via salert_save_settings_with_ajax()
Medium
CVE-2023-28775
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset
Medium
CVE-2023-29099
Divi <= 4.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32502
Pro Mime Types <= 1.0.7 - Cross-Site Request Forgery
Medium
CVE-2023-32300
Yoast SEO: Local <= 14.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-32503
GTmetrix for WordPress <= 0.4.6 - Reflected Cross-Site Scripting via 'report_id' and 'event_id'
Medium
CVE-2023-28780
Yoast SEO: Local <= 14.8 - Cross-Site Request Forgery
Medium
CVE-2023-32498
Easy Form by AYS <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.