Medium
CVE-2023-37276
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-38481
Integration for WooCommerce and Zoho CRM <= 1.3.6 - Open Redirect via setup_plugin
High
CVE-2023-3813
Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2023-38517
WRC Pricing Tables <= 2.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38513
Photo Engine <= 6.2.5 - Authenticated (Author+) Insecure Direct Object Reference in ajax_generate_auth_token
Medium
CVE-2023-38512
WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.5.4 - Cross-Site Request Forgery via wpstream_update_local_event_settings
Medium
CVE-2023-38518
Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38516
Audio Player with Playlist Ultimate <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-38391
Onepage Builder – Easiest Landing Page Builder For WordPress <= 2.4.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-38521
Exifography <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38482
Post Affiliate Pro <= 1.24.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32624
TS Webfonts for SAKURA <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-38478
Integration for WooCommerce and QuickBooks <= 1.2.3 - Open Redirect via setup_plugin
Medium
CVE-2023-38520
Pinpoint Booking System <= 2.9.9.3.4 - Content Spoofing
Medium
CVE-2023-38476
Client Portal : SuiteDash Direct Login <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32625
TS Webfonts for SAKURA <= 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2023-36382
Media Library Categories <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46841
Oxygen < 4.4 - Cross-Site Request Forgery
Medium
CVE-2023-28931
Post Connector <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38384
eaSYNC <= 1.3.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-38397
Gestion-Pymes <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-37998
Disabler <= 3.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-38383
Language <= 1.2.1 - Missing Authorization
Medium
CVE-2023-38387
Elastic Email Sender <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.