Medium
9fdc9d20-a1cf-4a58-b250-4f3f56b77b69
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2023-0080
Customer Reviews for WooCommerce <= 5.15.0 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2023-0159
Extensive VC Addons for WPBakery page builder <= 1.9 - Unauthenticated Local File Inclusion
High
CVE-2023-23970
Corsa Theme <= 1.5 - Authenticated Arbitrary File Upload
Critical
CVE-2022-47615
LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion
Medium
CVE-2022-47595
WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal
Critical
CVE-2023-23656
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload
High
CVE-2023-0255
Enable Media Replace <= 4.0.1 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2023-22677
WP Booklet <= 2.1.8 - Authenticated (Subscriber+) Remote Code Execution
High
79ef7b33-ea6b-4cf2-bed4-8177927ab650
WPDating <= 7.4.1 - Arbitrary File Upload
Critical
CVE-2022-4395
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload
Critical
CVE-2022-0316
Themes from Chimpstudio and Pixfill (Various Versions) - Unauthenticated Arbitrary File Upload
High
CVE-2022-3416
WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload
Medium
f28feb11-7e28-4b97-b529-f6d266c3e534
Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2022-4298
Wholesale Market <= 2.2.0 - Information Disclosure via Unauthenticated Arbitrary File Download
Medium
9933ca13-32fd-4481-a18f-21e9a11c423c
Slimstat Analytics <= 4.9.2 - Reflected Cross-Site Scripting via REQUEST_URI
Medium
CVE-2022-4109
Wholesale Market for WooCommerce < 2.0.0 - Authenticated (Administrator+) Arbitrary Log File Download
Medium
CVE-2022-4346
All-In-One Security <= 5.1.2 - Information Disclosure
High
ef1468eb-9b98-4d45-b357-70998ba17de7
UpdraftCentral Dashboard 0.8.23 - Server-Side Request Forgery
Medium
CVE-2022-4236
Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2022-4237
Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
High
CVE-2022-4140
Welcart e-Commerce 2.6.10-2.8.4 - Information Disclosure via Arbitrary File Read
Low
CVE-2022-45833
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Directory Traversal
High
CVE-2022-42699
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.