Medium
CVE-2023-27438
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-27442
Leyka <= 3.29.2 - Cross-Site Request Forgery
Medium
CVE-2023-25451
CPO Content Types <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27432
Manage Upload Limit <= 1.0.4 - Reflected Cross-Site Scripting via upload_limit
Medium
CVE-2023-25034
WP Clean Up <= 1.2.3 - Cross-Site Request Forgery via wp_clean_up_optimize
Medium
CVE-2023-25021
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Medium
CVE-2023-0844
Namaste! LMS <= 2.5.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'accept_other_payment_methods', 'other_payment_methods' Parameters
Medium
CVE-2023-27449
Total Poll Lite <= 4.8.6 - Cross-Site Request Forgery
Medium
CVE-2023-25467
Resize at Upload Plus <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2023-0968
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-25474
About Me 3000 widget <= 2.2.6 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2023-27450
Leyka <= 3.29.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-27445
Blog Floating Button <= 1.4.12 - Cross-Site Request Forgery
Medium
2b335807-f4d1-43b3-9e1b-2215eb00a3f8
WP Meteor Page Speed Optimization Topping <= 3.1.4 -Missing Authorization to Notice Dismissal
Medium
CVE-2023-0491
Schedulicity - Easy Online Scheduling <= 2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-27440
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2022-38141
Sales Report Email for WooCommerce <= 2.8.0 - Missing Authorization for Email Functionality
Medium
CVE-2023-25491
JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2022-47449
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD <= 3.1.5 - Reflected Cross-Site Scripting via cart_search
Medium
CVE-2023-27454
Rife Elementor Extensions & Templates <= 1.1.10 - Missing Authorization via import_templates
Medium
CVE-2023-23677
GTmetrix for WordPress <= 0.4.5 - Reflected Cross-Site Scripting via 'url'
Medium
c35bffb2-f805-48d6-938a-cb5142eac3b1
Fontiran <= 2.1 - Cross-Site Request Forgery
Medium
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.