Medium
CVE-2023-48325
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-5949
Simple Social Media Share Buttons <= 3.8.2 - Unauthenticated Password Protected Post Disclosure
Medium
CVE-2023-48318
Contact Form Email <= 1.3.41 - Captcha Bypass
Medium
CVE-2023-48283
Simple Testimonials Showcase <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-48336
Easy Social Icons <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-48740
Easy Social Feed <= 6.5.1 - Missing Authorization via hide_free_sidebar()
Medium
CVE-2023-48287
TextMe SMS <= 1.9.0 - Missing Authorization via tetxme_update_option_page()
Medium
CVE-2023-48281
Broken Link Checker for YouTube <= 1.3 - Cross-Site Request Forgery via plugin_settings_page()
Medium
CVE-2023-48737
TriPay Payment Gateway <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48326
Events Manager <= 6.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-48335
Hide login page <= 1.1.7 - Login Page Disclosure
High
CVE-2023-48327
WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates
Medium
CVE-2023-48323
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()
Medium
CVE-2023-48324
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()
Medium
CVE-2023-48286
Accept Stripe Payments <= 2.0.79 - Insecure Direct Object Reference
Medium
CVE-2023-48330
Bulk Comment Remove <= 2 - Cross-Site Request Forgery via brc_admin()
Medium
CVE-2023-48329
Fast Custom Social Share by CodeBard <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6136
Debug Log Manager <= 2.2.1 - Missing Authorization
Medium
CVE-2023-48328
NextGEN Gallery <= 3.37 - Cross-Site Request Forgery
Medium
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Medium
CVE-2023-48285
Accept Stripe Payments <= 2.0.79 - Unauthenticated Content Injection
Medium
CVE-2023-41128
WP Roadmap <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6137
Frontier Post <= 6.1 - Cross-Site Request Forgery
Medium
CVE-2023-48317
Display Custom Post <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.