Medium
CVE-2023-2296
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-2111
HollerBox <= 2.1.3 - Authenticated (edit_popups+) SQL Injection
High
CVE-2023-0733
Newsletter Popup <= 1.2 - Unauthenticted Stored Cross-Site Scripting via 'nl_data'
Medium
288853b8-7523-472e-8406-257ffb3bd5ea
WP-FormAssembly <= 2.0.8 - Limited Server Side Request Forgery via 'formassembly' shortcode
Medium
CVE-2023-0766
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Record Deletion
Medium
CVE-2023-2470
Add to Feedly <= 1.2.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-1465
WP EasyPay <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-2256
PPOM for WooCommerce <= 32.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-2452
Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-47176
Depicter Slider <= 1.9.0 - Missing Authorization on 'make' function
Medium
CVE-2023-31232
Plugins List <= 2.5 - Authenticated (Author+) Stored Cross-Site Scripting via replace_plugin_list_tags
Medium
CVE-2022-45809
Thumbs Rating <= 5.0.0 - Race Condition
Medium
CVE-2023-30780
User IP and Location <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47590
Maintenance Switch <= 1.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-47587
WP Search Analytics <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2279
WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display
Medium
CVE-2023-2277
WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem
Medium
CVE-2022-47606
WP-CORS <= 0.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2402
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13 - Reflected Cross-Site Scripting
Medium
CVE-2023-31228
CM On Demand Search And Replace <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-47599
Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-47600
Mass Email To users <= 1.1.4 - Unauthenticated Reflected Cross-Site Scripting via 'entrant'
Medium
CVE-2022-46821
Emails & Newsletters with Jackmail <= 1.2.22 - Authenticated (Subscriber+) CSV Injecton
Medium
CVE-2022-47604
AJAX Thumbnail Rebuild <= 1.13 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.