Medium
CVE-2023-2085
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-2086
Essential Blocks <= 4.0.6 - Missing Authorization via template_count
Medium
CVE-2023-1915
Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting
High
CVE-2022-3342
Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization
Medium
CVE-2023-30873
WP Docs <= 1.9.8 - Cross-Site Request Forgery to folder management
High
CVE-2022-45374
YARPP <= 5.30.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2023-2084
Essential Blocks <= 4.0.6 - Missing Authorization via get
Medium
CVE-2023-2120
Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-2031
Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2015-10102
Freshdesk (official) <= 1.7 - Open Redirect
Medium
CVE-2023-27606
WP Reroute Email <= 1.4.6 - Cross-Site Request Forgery
High
CVE-2023-27605
WP Reroute Email <= 1.4.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-4290
Cyr to Lat <= 3.5 - Authenticated SQL Injection
High
CVE-2023-24379
Landing Page Builder – Free Landing Page Templates <= 3.1.9.8 - Local File Inclusion via 'lpp_template_select'
Medium
CVE-2023-1651
ChatBot <= 4.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via openai_settings_option_callback
Medium
CVE-2023-1649
AI ChatBot <= 4.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1660
ChatBot <= 4.4.8 - Unauthenticated Stored Cross-Site Scripting in Admin Dashboard
Medium
CVE-2023-0769
hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting
Critical
CVE-2023-1650
ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies
Medium
CVE-2023-1809
Download Manager Pro <= 6.2.9 - Unauthenticated Information Disclosure
Critical
CVE-2023-1730
SupportCandy <= 3.1.4 - Unauthenticated SQL Injection via parse_user_filters
Medium
CVE-2023-30489
Email Subscription Popup <= 1.2.16 - Reflected Cross-Site Scripting
Medium
e74be387-1413-49c5-91c6-66e620562b42
Hustle <= 7.6.4 = Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-29429
User Registration <= 2.3.2.1 - Missing Authorization via send_test_email
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.