Medium
CVE-2023-44246
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-44237
WP Site Protector <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2023-44240
Timthumb Vulnerability Scanner <= 1.54 - Cross-Site Request Forgery
Medium
CVE-2023-5292
Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44245
Contractor Contact Form Website to Workflow Tool <= 4.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-44233
FooGallery <= 2.2.44 - Cross-Site Request Forgery
Medium
CVE-2023-44239
WWM Social Share On Image Hover <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-44471
Backend Localization <= 2.1.10 - Cross-Site Request Forgery
Medium
a5bc6097-d6ed-4598-b3c8-9159d5ce04ee
WP Custom Admin Interface <= 7.32 - Cross-Site Request Forgery to Transients Deletion
Medium
CVE-2023-44235
WP Captcha <= 2.0.0 - CAPTCHA Bypass
Medium
CVE-2023-44476
CopyRightPro <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-44236
WP Captcha <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-44238
Remove slug from custom post type <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-44477
Cooked <= 1.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44234
WP GPX Map <= 1.7.05 - Missing Authorization
Medium
CVE-2023-44473
Table of Contents Plus <= 2302 - Cross-Site Request Forgery
Medium
CVE-2023-5295
Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-44244
FooGallery <= 2.2.44 - Reflected Cross-Site Scripting
Medium
CVE-2023-44231
Contact Form <= 2.0.11 - Cross-Site Request Forgery
Medium
CVE-2023-44242
Slideshow, Image Slider by 2J <= 1.3.54 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44475
Add Shortcodes Actions And Filters <= 2.0.9 - Cross-Site Request Forgery
Medium
CVE-2023-44232
WP Hide Pages <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-44988
WP Custom Admin Interface <= 7.32 - Missing Authorization to Transients Deletion
Critical
CVE-2023-5201
OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.