Medium
CVE-2023-1208
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2023-3295
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2023-3202
MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update
Medium
CVE-2023-1273
ND Shortcodes <= 6.9 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2023-3131
MStore API <= 3.9.6 - Missing Authorization
High
CVE-2023-34007
Download Monitor <= 4.8.3 - Authenticated(Subscriber+) Arbitrary File Upload via upload_file
High
CVE-2023-1895
Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery
High
CVE-2023-2249
wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents
High
CVE-2023-2435
Blog-in-Blog <= 2.0.0 - Authenticated (Editor+) Local File Inclusion via Shortcode
Medium
CVE-2023-31219
Download Monitor <= 4.8.1 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2023-34186
Headless CMS <= 2.0.3 - Missing Authorization
Critical
CVE-2023-2278
WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action
High
CVE-2023-2496
Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Improper Authorization to Arbitrary File Upload
Critical
CVE-2023-33930
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Zip Extraction to Arbitrary File Upload in File Manager
Medium
CVE-2023-33314
BEAR <= 1.1.3.1 - Cross-Site Request Forgery via Multiple Functions
Critical
CVE-2023-33318
WooCommerce Follow-Up Emails <= 4.9.40 - Authenticated Arbitrary File Upload in Template Editing
Critical
CVE-2023-31090
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager
High
CVE-2023-2359
Slider Revolution <= 6.6.12 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-33310
Unite Gallery Lite <= 1.7.59 - Authenticated(Administrator+) Local File Inclusion via 'view' parameter
High
CVE-2023-32245
Essential Addons for Elementor Pro <= 5.4.8 - Unauthenticated Server-Side Request Forgery
High
CVE-2023-26526
Bookly <= 21.7.1 - Arbitrary File Deletion
High
CVE-2023-2252
Directorist <= 7.5.3 - Authenticated (Administrator+) Local File Inclusion
Critical
CVE-2023-29386
Manager for Icomoon <= 2.0 - Unauthenticated Arbitrary File Upload via 'upload'
Medium
CVE-2023-27630
Community by PeepSo <= 6.0.9.0 - Missing Authorization to Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.