High
CVE-2023-5098
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-45108
Mailrelay <= 2.1.1 - Cross-Site Request Forgery via render_admin_page
Low
CVE-2023-45105
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.9 - Open Redirect via atkpout.php
Medium
CVE-2023-4797
Newsletter Lite <= 4.9.2 - Authenticated (Admin+) Command Injection
Medium
c5429fb1-7072-4a00-8fb3-48d4f876417f
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization
High
CVE-2023-30870
Sharkdropship for AliExpress Dropship and Affiliate <= 2.2.4 - Missing Authorization
Medium
CVE-2023-44993
ChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check
Medium
CVE-2023-45008
Comment Reply Email <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3213
WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page
Medium
CVE-2023-2487
WP Ultimate Exporter <= 2.4.1 - Unauthenticated Information Disclosure
Medium
CVE-2023-45063
AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One <= 1.1.6 - Cross-Site Request Forgery
High
3816a6cf-8157-4ad9-83f6-93c9b6c6275f
Post SMTP <= 2.6.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-44150
ProfilePress <= 4.13.2 - Information Disclosure via Debug Log
High
CVE-2023-40219
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload
High
CVE-2023-3154
WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) PHAR Deserialization
High
CVE-2023-41956
Simple Membership <= 4.3.4 - Account Takeover via Password Reset
Medium
CVE-2023-4938
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4941
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4926
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
Medium
CVE-2023-5003
Active Directory Integration / LDAP Integration <= 4.1.9 - Unauthenticated Information Disclosure
Medium
CVE-2023-4924
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
Medium
CVE-2023-4923
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
Medium
CVE-2023-3279
WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2023-4935
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.