Medium
343cbdda-2ec5-437f-b563-96c61663314d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
2a0381b1-9b63-41cb-8125-d22274b98867
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
Medium
CVE-2022-40312
GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler
Medium
CVE-2023-1263
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure
Medium
CVE-2023-7293
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_mollie_account_details'
High
CVE-2023-0467
WP Dark Mode <= 4.0.7 - Authenticated (Subscriber+) Local File Inclusion via 'style'
High
CVE-2020-36666
Multiple E-plugins (Various Versions) - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-27429
Jetpack CRM <= 5.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0772
OptinMonster <= 2.12.1 - Authenticated (Subscriber+) Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-27438
WP Translitera <= p1.2.5 - Cross-Site Request Forgery
Low
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Medium
CVE-2023-0968
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
Medium
CVE-2022-38141
Sales Report Email for WooCommerce <= 2.8.0 - Missing Authorization for Email Functionality
Medium
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
Medium
CVE-2023-26523
Calculated Fields Form <= 1.1.120 - Cross-Site Request Forgery
High
CVE-2023-0631
Paid Memberships Pro <= 2.9.11 - Authenticated (Subscriber+) SQL Injection via Shortcodes
High
CVE-2023-23700
OceanWP <= 3.4.1 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2023-26531
多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 <= 4.2.5 - Cross-Site Request Forgery
Medium
CVE-2023-1022
WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'
Medium
CVE-2023-1027
WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'
Medium
CVE-2023-0585
All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0586
All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-25038
For the visually impaired <= 0.58 - Cross-Site Request Forgery to Plugin Settings Changes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.