Medium
CVE-2023-24416
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2023-25967
Community by PeepSo <= 6.0.2.0 - Cross-Site Request Forgery leading to Plugin/Subscription Deletion
High
CVE-2023-0340
Custom Content Shortcode <= 4.0.2 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2023-0389
Calculated Fields Form <= 1.1.150 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-23830
ProfilePress <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-23705
WordPress Books Gallery <= 4.4.8 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2023-23708
Visualizer <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2022-47143
Multiple Page Generator Plugin <= 3.3.9 - Cross-Site Request Forgery
Medium
CVE-2022-46851
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
Medium
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
High
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
Medium
CVE-2022-47422
Accept Stripe Donation – AidWP <= 3.1.5 - Cross Site Request Forgery
Medium
CVE-2023-25991
RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion
Medium
CVE-2022-40203
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization in ajaxCalculateSeveralProducts function
Medium
CVE-2023-0538
Campaign URL Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23724
WordPress Email Marketing Plugin – WP Email Capture <= 3.9.3 - Cross Site Request Forgery
Medium
CVE-2023-25796
WP BaiDu Submit <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
06294c35-6d58-4270-b143-757831fc5da6
Campaign URL Builder <= 1.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting via Create Link
Medium
CVE-2023-25697
GamiPress <= 2.5.6 - Cross-Site Request Forgery to User Earnings Deletion
Medium
CVE-2022-38468
NextGEN Gallery <= 3.28 - Cross-Site Request Forgery leading to Post Thumbnail Change
Medium
CVE-2023-25709
Locatoraid Store Locator <= 3.9.11 - Cross Site Request Forgery in grab
Medium
75f0bc5a-f588-4aeb-9e55-72e180d39ddf
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Missing Authorization to Order Information Disclosure
Medium
5ebdf903-828e-4a22-953a-17d85984b576
AutomatorWP <= 2.5.8 - Cross Site Request Forgery via bulk_delete
Medium
CVE-2022-46811
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Cross-Site Request Forgery to Order Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.