Medium
CVE-2023-23800
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-25050
Shortcodes Ultimate <= 5.12.6 - Authenticated (Subscriber+) Arbitrary File Read via Shortcode
Medium
CVE-2023-0832
Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot
Medium
CVE-2023-25472
Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery
Medium
CVE-2023-25793
Link Juice Keeper <= 2.0.2 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0328
WPCode <= 2.0.6 - Missing Authorization to Sensitive Key Disclosure/Update
Medium
CVE-2023-0377
Scriptless Social Sharing <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options
High
CVE-2022-3568
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to PHAR Deserialization
High
CVE-2023-0487
My Sticky Elements <= 2.0.8 - Authenticated (Admin+) SQL Injection
High
CVE-2022-4265
Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice
Medium
CVE-2023-25447
ColorWay <= 4.2.3 - Cross Site Request Forgery
Medium
CVE-2023-0292
Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion
Medium
CVE-2022-45837
微信机器人高级版 <= 6.2.1 - Reflected Cross Site Scripting
High
CVE-2022-44580
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-0723
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
Medium
CVE-2023-0711
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
Medium
CVE-2023-0715
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
Medium
CVE-2023-0729
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
Medium
CVE-2023-0719
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
Medium
CVE-2023-0731
Interactive Geo Maps <= 1.5.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-0720
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
Medium
CVE-2022-46855
Responsive Pricing Table <= 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-1110
Yellow Yard Searchbar <= 2.7.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0725
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.