Critical
CVE-2023-51425
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2023-51422
WebinarIgnition <= 3.05.0 - Authenticated(Subscriber+) PHP Object Injection
Medium
CVE-2023-51517
Calculated Fields Form <= 1.2.28 - Authenticated (Contributor+) Open Redirect via Shortcode
High
CVE-2023-51470
Rencontre – Dating Site <= 3.11.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-51522
Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry
Medium
CVE-2023-51528
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
Medium
CVE-2023-51682
MC4WP <= 4.9.9 - Missing Authorization via listen
Medium
CVE-2023-51487
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Medium
CVE-2023-51508
Database Cleaner <= 0.9.8 - Sensitive Information Exposure via Log File
Medium
CVE-2023-51527
AI Power: Complete AI Pack – Powered by GPT-4 <= 1.8.1 - Missing Authorization to Sensitive Data Exposure
Medium
CVE-2023-51695
Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-51408
WP Optin Wheel <= 1.4.2 - Sensitive Information Exposure via Log File
Critical
CVE-2023-51424
WebinarIgnition <= 3.05.0 - Missing Authorization to Unauthenticated Privilege Escalation
Critical
CVE-2023-51419
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-51696
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery via apbct_settings__update_account_email
Medium
CVE-2023-51414
EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection
Medium
CVE-2023-51532
Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message
Medium
CVE-2023-51416
EnvíaloSimple <= 2.2 - Cross-Site Request Forgery
High
CVE-2023-51410
WP Mail Log Plugin <= 1.1.2 - Authenticated(Contributor+) Arbitrary File Upload
Medium
CVE-2023-51377
Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms
Medium
CVE-2023-51374
ZeroBounce Email Verification & Validation <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-51361
Sticky Chat Widget <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-51372
HashBar – WordPress Notification Bar <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2023-51355
WC Marketplace <= 4.0.23 - Missing Authorization via mvx_save_dashpages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.