High
CVE-2023-29095
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2023-37389
Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset
Medium
CVE-2023-2174
BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries
Medium
CVE-2023-2172
BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite
Medium
CVE-2022-47172
WooLentor <= 2.6.2 - Cross-Site Request Forgery via process_data
High
CVE-2023-3168
WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-3011
ARMember <= 4.0.5 - Cross-Site Request Forgery
Medium
CVE-2023-28934
WP Full Stripe Free <= 7.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-37387
Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_delete
Medium
CVE-2023-37392
WP Dummy Content Generator <= 2.3.0 - Cross-Site Request Forgery
Medium
CVE-2023-2974
quarkus-core vulnerable to client driven TLS cipher downgrading
Medium
CVE-2023-1119
WP-Optimize <= 3.2.12 & SrbTransLatin <= 2.4 - Stored/Reflected Cross-Site Scripting via Third Party Library
High
CVE-2023-36515
LearnPress <= 4.2.3 - Missing Authorization to Information Exposure
Medium
CVE-2023-36516
LearnPress <= 4.2.3 - Missing Authorization
Medium
CVE-2023-24393
Animated Number Counters <= 1.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-36681
Cryptocurrency Widgets – Price Ticker & Coins List <= 2.6.2 - Missing Authorization
Medium
CVE-2023-36694
Kingkong Board <= 2.1.0.2 - Missing Authorization
Medium
CVE-2023-36680
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization
Medium
CVE-2023-36687
Menubar <= 5.8.2 - Cross-Site Request Forgery in wpm-admin.php
Medium
CVE-2023-36688
Simple Site Verify <= 1.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36693
WP RSS Images <= 1.1 - Cross-Site Request Forgery
Critical
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-24401
Mobile Call Now & Map Buttons < 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36678
WP Content Copy Protection & No Right Click <= 3.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.