Medium
CVE-2023-25046
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-0230
VK All in One Expansion Unit <= 9.85.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-25022
Watu Quiz <= 3.3.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0539
GS Insever Portfolio <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4550
User Activity <= 1.0.1 - IP Address Spoofing
Medium
CVE-2023-25023
WebinarIgnition <= 2.14.2 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-47603
Gallery – Image and Video Gallery with Thumbnails <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-45360
Commenter Emails <= 2.6.1 - Unauthenticated CSV Injection
Medium
CVE-2023-25028
CC Custom Taxonomy <= 1.0.1 - Authenticated (Administrator+) Cross Site Scripting
Medium
CVE-2023-22689
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function
Medium
CVE-2022-44743
Jobs for WordPress <= 2.5.10.2 - Authenticated (Author+) Cross Site Scripting
Medium
CVE-2022-45361
0mk Shortener <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-45368
1003 Mortgage Application <= 1.75 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2022-47443
Multi Rating <= 5.0.5 - Cross Site Request Forgery
Medium
CVE-2023-25067
We’re Open! <= 1.45 - Cross-Site Request Forgery
Medium
CVE-2023-25062
Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0334
ShortPixel Adaptive Images <= 3.6.1 - Reflected Cross-Site Scripting
High
CVE-2023-23879
PHP Execution <= 1.0.0 - Cross Site Request Forgery
Medium
CVE-2022-47607
Usersnap <= 4.16 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-0285
Real Media Library: Media Library Folder & File Manager <= 4.18.28 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-45350
Simple History <= 3.3.1 - Authenticated (Subscriber+) CSV Injection
Medium
CVE-2023-25061
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0479
Print Invoice & Delivery Notes for WooCommerce <= 4.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-44738
Posts and Users Stats <= 1.1.3 - Authenticated (Subscriber+) CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.