Medium
CVE-2023-41862
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-41847
Notice Bar <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-41859
Order Delivery Date for WP e-Commerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4779
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-41949
iFolders <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41950
Laposta Signup Basic <= 1.4.1 - Cross-Site Request Forgery
Medium
CVE-2023-41870
WP Crowdfunding <= 2.1.4 - Missing Authorization via settings_reset
Medium
CVE-2023-41868
Stagtools <= 2.3.7 - Reflected Cross-Site Scripting
High
CVE-2023-41863
PeproDev CF7 Database <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting via form submission
Medium
CVE-2023-41697
Easy WP Cleaner <= 1.9 - Cross-Site Request Forgery
Critical
CVE-2023-40555
Flatsome <= 3.17.5 - Unauthenticated PHP Object Injection
Medium
CVE-2023-41853
WP iCal Availability <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-4773
WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-41869
WP Accessibility Helper (WAH) <= 0.6.2.4 - Missing Authorization via AJAX action
Medium
b7e417c2-bf9c-4c88-be2b-9c2324897b07
Laposta Signup Basic <= 1.4.1 - Missing Authorization
Medium
CVE-2023-41851
WP Custom Post Template <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-41856
Click To Tweet <= 2.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2023-41801
AWP Classifieds <= 4.3 - Cross-Site Request Forgery
Low
CVE-2023-41798
Directorist <= 7.7.1 - CSV Injection
Medium
CVE-2023-41867
AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-41695
Analytify Dashboard <= 5.1.0 - Missing Authorization to Opt-In
Medium
CVE-2023-41850
Outbound Link Manager <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-41857
Click To Tweet <= 2.0.14 - Missing Authorization
Medium
CVE-2023-41735
Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.