High
CVE-2023-48699
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-48051
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.
High
CVE-2023-2497
UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2023-48271
Maspik – Spam blacklist <= 0.10.3 - Bypass
Medium
CVE-2023-6008
UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions
Medium
CVE-2023-48272
Maspik – Spam blacklist <= 0.9.2 - Unauthenticated Stored Cross-Site Scripting via efas_add_to_log
High
CVE-2023-6009
UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2023-2449
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
Medium
CVE-2023-47877
Perfmatters < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
b758c8a7-6220-4b54-af88-7933a530b5ba
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Critical
CVE-2023-2437
UserPro <= 5.1.1 - Authentication Bypass to Administrator
Medium
CVE-2023-6222
Quttera Web Malware Scanner <= 3.4.1.48 - Authenticated (Administrator+) Directory Traversal via ShowFile
Medium
CVE-2023-47875
Perfmatters <= 2.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-2438
UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
Medium
CVE-2023-2448
UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
High
CVE-2023-2440
UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2023-6007
UserPro <= 5.1.1 - Missing Authorization via multiple functions
Medium
CVE-2023-47876
Perfmatters <= 2.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-48273
Preloader for Website <= 1.2.2 - Missing Authorization via plwao_register_settings()
Low
52d1f9a3-243e-4e2c-a752-f40b6d275121
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_delete_expired_used_coupon_code
High
CVE-2023-5348
Product Catalog Mode For WooCommerce <= 5.0.2 - Unauthenticated Stored Cross-Site Scripting
Medium
5124be64-6679-4dc5-8117-55c73ae91489
EventPrime – Modern Events Calendar, Bookings and Tickets <= 3.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Low
4edbfeee-b668-4a85-a030-c15d6583dc82
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_preview_emails
Medium
CVE-2023-48274
WCMultiShipping <= 2.3.5 - Missing Authorization to Log Export
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.