Medium
CVE-2023-46066
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-46068
Maileon <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46080
ApplyOnline – Application Form Builder and Manager <= 2.5.2 - Missing Authorization
Medium
CVE-2023-5352
Awesome Support <= 6.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
Medium
CVE-2023-46073
DX Delete Attached Media <= 2.0.5.1 - Cross-Site Request Forgery via add_to_base
Medium
CVE-2023-46078
Serial Numbers for WooCommerce – License Manager <= 1.6.3 - Cross-Site Request Forgery
High
CVE-2023-46084
Icons Font Loader <= 1.1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-3254
Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset
Medium
CVE-2023-46069
Ajax Archive Calendar <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46067
Rocket Font <= 1.2.3 - Cross-Site Request Forgery via update_option_check_match_default
Critical
CVE-2023-5601
WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-32116
Custom post types <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4858
Simple Table Manager <= 1.5.6 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5613
Super Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-30492
Minimum Purchase for WooCommerce <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-46072
Add Shortcodes Actions And Filters <= 2.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-46075
Contact Form Builder, Contact Widget <= 2.1.7 - Reflected Cross-Site Scripting
High
CVE-2023-46081
Lava Directory Manager <= 1.1.34 - Unauthenticated Stored Cross-Site Scripting via New Listing
Medium
CVE-2023-4810
Responsive Pricing Table < 5.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-5614
Theme Switcha <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5228
User Registration – Custom Registration Form, Login Form And User Profile For WordPress <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46085
Wp Ultimate Review <= 2.3.0 - Cross-Site Request Forgery via wur_settings_view
Medium
CVE-2023-46079
Ashe Extra <= 1.2.91 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-46087
Who Hit The Page – Hit Counter <= 1.4.14.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.