Critical
CVE-2023-25970
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-26538
Chat Bee <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1027
WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'
Medium
CVE-2023-26542
phpinfo() WP <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2023-1024
WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'
Medium
CVE-2023-0585
All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-0876
WP Meta SEO <= 4.5.2 - Missing Authorization in 'startProcess' to Arbitrary Redirect via 'update_link_redirect' task
Medium
CVE-2023-26536
Sp*tify Play Button for WordPress <= 2.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0586
All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-25960
Zendrop – Global Dropshipping <= 1.0.0 - SQL Injection in setMetaData
High
CVE-2023-0630
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-25985
WordPress Tooltips <= 8.2.5 - Multiple Cross-Site Request Forgery
High
CVE-2023-23861
GMAce <= 1.5.2 - Cross-Site Request Forgery via gmace_manager_client
Medium
CVE-2023-23872
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal
Medium
CVE-2023-25992
CM Answers <= 3.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25977
CPT – Speakers <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25965
Upload Resume <= 1.2.0 - Authenticated Sensitive Information Disclosure via resume_upload_form_list shortcode
Medium
CVE-2023-25458
TypeSquare Webfonts for ConoHa <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24007
Admin Block Country <= 7.1.4 - Cross-Site Request Forgery via admin_block_country_initial_page
Medium
CVE-2023-25038
For the visually impaired <= 0.58 - Cross-Site Request Forgery to Plugin Settings Changes
Medium
CVE-2023-1089
Coupon Zen <= 1.0.5 - Cross-Site Request Forgery to Plugin Activation
Medium
CVE-2023-25982
Simple YouTube Responsive <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-26016
Simple Portfolio Gallery <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-26012
Custom Login Page <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.