Medium
CVE-2023-36506
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2023-4276
Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change
High
CVE-2023-4277
Realia <= 1.4.0 - Cross-Site Request Forgery to User Email Change
Medium
CVE-2023-39990
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Course Modifications
Medium
CVE-2023-4242
FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check
Medium
55fac183-bd8d-4e16-b25a-784861897deb
Paid Memberships Pro - Courses for Membership Add On <= 1.2.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-3360
Weaver Show Posts <= 1.8.0 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-4253
ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-4254
ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings
Medium
0e454573-4b34-40e3-b4c3-10eb71dfa03e
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications
Critical
CVE-2023-37390
Themesflat Addons For Elementor <= 2.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2023-4109
Ninja Forms <= 3.6.25 - Authenticated (Administrator+) Stored HTML Injection
Medium
CVE-2023-4315
Woo Custom Emails <= 2.2 - Reflected Cross-Site Scripting via wcemails_edit
Medium
CVE-2023-3604
Change WP Admin Login <= 1.1.3 - Protection Mechanism Failure to Login Page Disclosure
Medium
CVE-2023-39162
User Email Verification for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-38393
Ninja Forms <= 3.6.25 - Missing Authorization to Form Submission Export
Medium
CVE-2023-38386
Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export
Medium
CVE-2023-37979
Ninja Forms <= 3.6.25 - Reflected Cross-Site Scripting via 'data'
Medium
CVE-2023-3721
WP-EMail <= 2.69.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-3636
WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
High
CVE-2023-3813
Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2023-38387
Elastic Email Sender <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3779
Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
Medium
CVE-2023-2606
WP Brutal AI < 2.06 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.