High
CVE-2023-47846
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-6091
Theme Editor <= 2.7.1 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-47847
PayTR Taksit Tablosu <= 1.3.1 - Missing Authorization
Medium
CVE-2023-47843
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Deletion
Medium
CVE-2023-6203
The Events Calendar <= 6.2.8 - Information Disclosure
Medium
CVE-2023-47850
Community by PeepSo <= 6.2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47848
Tainacan <= 0.20.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-47845
Grab & Save <= 1.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-47869
wpForo Forum <= 2.2.5 - Missing Authorization
Low
CVE-2023-5907
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
Medium
CVE-2023-47872
wpForo Forum <= 2.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-47854
Parallax Image <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-47873
WP Child Theme Generator <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
42b2d840-4e8b-4027-ab3b-78b17c9ed9aa
Floating Action Button <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2023-47870
wpForo Forum <= 2.2.8 - Cross-Site Request Forgery via logout()
Medium
CVE-2023-47851
Bootstrap Shortcodes Ultimate <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47844
Grab & Save <= 1.0.4 - Reflected Cross-Site Scripting
High
CVE-2023-6035
EazyDocs <= 2.3.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-47849
BlossomThemes Email Newsletter <= 2.2.4 - Missing Authorization
High
CVE-2023-47842
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
Medium
17453fa5-af14-477b-9b3d-b245511ad8ce
Auto Affiliate Links <= 6.4.2.5 - Cross-Site Request Forgery
High
CVE-2023-5674
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id
Critical
CVE-2023-47868
wpForo Forum <= 2.2.3 - Unauthenticated Privilege Escalation
Medium
c6e2710f-f51a-487d-a4bb-a19f614ff254
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via manual review reminders
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.