Medium
CVE-2023-45652
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-45770
Fast WP Speed <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-45768
Next Page <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
bdc84664-2a04-4cc6-ac3f-48bfd432691f
WordPress Core 4.7.0-6.3.1 - Denial of Service via Cache Poisoning
Medium
af77d642-d383-48f2-a59a-3a9c738cd47f
WordPress Core 6.3 - 6.3.1 - Authenticated(Contributor+) Cross-Site Scripting via Footnotes Block
Medium
CVE-2023-45749
AGP Font Awesome Collection <= 3.2.4 - Cross-Site Request Forgery
Medium
a5368894-3277-47d0-8fad-adfb8df4fa93
WordPress Core 5.6 - 6.3.1 - Reflected Cross-Site Scripting via Application Password Requests
Medium
CVE-2023-45769
WP Report Post <= 2.1.2 Reflected Cross-Site Scripting
Medium
CVE-2023-45656
Lazy Load for Videos <= 2.18.2 - Cross-Site Request Forgery
Medium
CVE-2023-45762
Responsive Column Widgets <= 1.2.7 - Open Redirect via responsive_column_widgets_link
High
CVE-2023-45657
Nexter <= 2.0.3 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'
Medium
CVE-2023-45641
Caret Country Access Limit <= 1.0.2 - Cross-Site Request Forgery
Medium
CVE-2023-45750
Nexter Extension <= 2.0.3 - Reflected Cross-Site Scripting via post and post_id
Medium
CVE-2023-45761
Sendle Shipping <= 5.17 - Reflected Cross-Site Scripting
Medium
CVE-2023-45759
Peter’s Custom Anti-Spam <= 3.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-33214
Taggbox <= 3.3 - Cross-Site Request Forgery
Medium
CVE-2023-45654
Comments Ratings <= 1.1.7 - Cross-Site Request Forgery
Medium
CVE-2023-45764
Scroll post excerpt <= 8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45756
ApplyOnline – Application Form Builder and Manager <= 2.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-39999
WordPress Core <= 6.3.1 - Authenticated(Contributor+) Sensitive Information Exposure via Comments on Protected Posts
Medium
CVE-2023-45766
Poll Maker <= 4.7.1 - Missing Authorization
Medium
CVE-2023-38000
WordPress Core 5.9-6.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Navigation Attributes
Medium
CVE-2023-45642
Snap Pixel <= 1.5.8 - Cross-Site Request Forgery
Medium
CVE-2023-45643
CPT Shortcode Generator <= 1.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.