Medium
CVE-2023-31237
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-2287
Orbit Fox by ThemeIsle <= 2.10.23 - Authenticated (Author+) Server-Side Request Forgery via URL
Medium
CVE-2023-31229
WP Directory Kit <= 1.1.9 - Open Redirect
Medium
CVE-2023-2122
Image Optimizer WD <= 1.0.26 - Reflected Cross-Site Scripting
Medium
CVE-2023-30875
Logo Scheduler <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2275
WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note Addition via REST API
Medium
CVE-2023-1977
Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2023-31092
Easy Bet <= 1.0.7 - Authenticated(Contributor+) SQL Injection
Medium
CVE-2023-31095
Integration for Contact Form 7 HubSpot <= 1.2.8 - Open Redirect via state parameter
Medium
CVE-2023-2225
SEO ALert <= 1.5.9 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2123
WP Inventory Manager <= 2.1.0.12 - Reflected Cross-Site Scripting via 'message'
Medium
CVE-2022-4782
ClickFunnels <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-28690
WP BrowserUpdate <= 4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-27412
Mocho Blog <= 1.0.4 - Cross-Site Scripting
Critical
CVE-2023-2032
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's'
High
CVE-2023-1347
Customizer Export/Import <= 0.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-43450
Stream <= 3.9.2 - Missing Authorization via load_alerts_settings
Critical
d22fb2e8-bb61-49bc-9fab-8f7c58339a69
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection
Medium
CVE-2023-2113
Autoptimize <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS Rules
Medium
CVE-2023-2289
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
High
CVE-2023-0579
YARPP - Yet Another Related Posts Plugin <= 5.30.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-27421
Everest News <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2254
Ko-fi Button <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0274
URL Params <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.