Medium
CVE-2023-6446
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2023-49778
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection
Critical
CVE-2023-49773
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection
Critical
CVE-2023-49826
Soledad <= 8.4.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-6527
Email Subscription Popup <= 1.2.18 - Reflected Cross-Site Scripting
Critical
CVE-2023-49772
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection
High
CVE-2023-49819
Structured Content <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-49816
Fix My Feed RSS Repair <= 1.4 - Cross-Site Request Forgery
Critical
CVE-2023-49753
Adifier System < 3.1.4 - Unauthenticated Local File Inclusion
Medium
CVE-2023-49741
Coming soon and Maintenance mode <= 3.7.3 - IP Address Spoofing via get_real_ip
Medium
CVE-2023-49194
Importify <= 1.0.4 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-6155
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
High
CVE-2023-6528
Slider Revolution < 6.6.19 - Authenticated (Author+) PHP Object Injection
High
CVE-2023-6266
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
Medium
CVE-2023-49168
BP Better Messages <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-49190
Site Offline <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-49170
Forms by CaptainForm <= 2.5.3 - Reflected Cross-Site Scripting via REQUEST_URI
Medium
CVE-2023-49172
BrainCert – HTML5 Virtual Classroom <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-6421
Download Manager <= 3.2.82 - Unauthenticated Password Leak
Medium
CVE-2023-49156
GoDaddy Email Marketing <= 1.4.3 - Missing Authorization
Medium
CVE-2023-5644
WP Mail Log <= 1.1.2 - Incorrect Authorization to Authenticated (Contributor+) Data Viewing and Deletion
High
CVE-2023-48757
JetEngine <= 3.2.4 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2023-48765
Email Address Encoder 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-5672
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.