Medium
CVE-2023-37987
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-3709
Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
Medium
CVE-2023-37984
Quiz And Survey Master <= 8.1.10 - Excessive Quiz Attempts
Medium
CVE-2021-24916
Qubely – Advanced Gutenberg Blocks <= 1.8.5 - Insufficient Authorization
Medium
CVE-2023-37989
Easyship WooCommerce Shipping Rates <= 0.8.9 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-3404
ProfileGrid <= 5.5.0 - Hardcoded Encryption Key
Medium
CVE-2023-34011
ShopConstruct – Product Catalog, Shopping Cart and eCommerce solution for Store <= 1.1.2 - Reflected Cross-Site Scripting via multiple parameters
High
CVE-2023-3713
ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update
Medium
CVE-2023-37986
YourMembership Single Sign On <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-2433
YARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32292
Chat Button <= 1.8.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-0604
WP Food Manager <= 1.0.3 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3671
MultiParcels Shipping For WooCommerce <= 1.15.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-36528
kk Star Ratings <= 5.4.3 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-3708
Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2023-3575
Quiz And Survey Master <= 8.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Question Title
Medium
CVE-2023-3524
WPCode <= 2.0.13 - Unauthenticated Reflected Cross-Site Scripting via Tag Filter Links
High
CVE-2023-3492
WP Shopping Pages <= 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-37985
Restaurant Menu and Food Ordering by Five Star Plugins <= 2.4.6 - Cross-Site Request Forgery via maybe_duplicate_item
Medium
CVE-2023-31221
PDQ CSV <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-3691
layui vulnerable to cross-site scripting
Medium
CVE-2023-3692
Admidio vulnerable to Unrestricted Upload of File with Dangerous Type
Medium
CVE-2023-36686
CartFlows Pro <= 1.11.11 - Reflected Cross-Site Scripting
Critical
CVE-2015-10122
WP Donate <= 1.4 - Unauthenticated SQL Injection in donate-display.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.