Medium
CVE-2023-7293
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-7292
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss'
High
CVE-2023-7291
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account'
High
CVE-2023-0467
WP Dark Mode <= 4.0.7 - Authenticated (Subscriber+) Local File Inclusion via 'style'
Medium
CVE-2023-7290
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_for_verified_profiles'
Medium
CVE-2023-7289
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_sw_save_api_keys'
Medium
CVE-2023-0823
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_revoke_shortcode' Shortcode
Medium
CVE-2023-0816
Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header
High
CVE-2020-36666
Multiple E-plugins (Various Versions) - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-7288
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'
High
CVE-2023-0955
WP Statistics <= 13.2.16 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-7287
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription'
Medium
CVE-2023-1069
Complianz - GDPR/CCPA Cookie Consent <= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-27437
Event Espresso 4 Decaf <= 4.10.44.decaf - Feature Bypass
Medium
CVE-2023-27431
Big Store <= 1.9.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-27444
DecaLog <= 3.7.0 - Cross-Site Request Forgery via get_settings_page
Medium
CVE-2023-27429
Jetpack CRM <= 5.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-40700
CSSTidy - Server-Side Request Forgery
Medium
CVE-2023-0772
OptinMonster <= 2.12.1 - Authenticated (Subscriber+) Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-27436
Elegant Custom Fonts <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-27439
New Adman <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27434
Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page
Medium
CVE-2023-27441
New Adman <= 1.6.8 - Cross-Site Request Forgery via plugin_menu
Medium
CVE-2022-40699
Yet Another Stars Rating <= 3.1.2 - Authenticated (Subscriber+) Cross-Site Scripting via Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.