Low
ghsa-5cpq-8wj7-hf2v
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-32310
DataEase API interface has IDOR vulnerability
Medium
CVE-2023-32294
GDPR Cookie Consent Notice Box <= 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2416
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout
High
CVE-2023-2781
User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass
Medium
CVE-2023-34008
WP ERP <= 1.12.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-2404
CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-3053
Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation
Medium
CVE-2023-34371
SpamReferrerBlock <= 2.22 - Cross-Site Request Forgery
Medium
CVE-2023-34019
Uncanny Toolkit for LearnDash <= 3.6.4.3 - Missing Authorization via review-banner-visibility REST route
Medium
CVE-2023-0584
VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update
Low
b9002f6e-4345-4908-9cb8-9841a2458eb7
CartFlows <= 1.11.11 - Insecure Direct Object Reference to Arbitrary Post Deletion
Medium
CVE-2023-32094
Extended Post Status <= 1.0.19 - Missing Authorization via wp_insert_post_data
Medium
CVE-2023-3052
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion
Medium
CVE-2023-34002
WP Inventory Manager <= 2.1.0.13 - Cross-Site Request Forgery via delete_item
Medium
CVE-2023-34012
Premium Addons PRO <= 2.8.24 - Reflected Cross-Site Scripting
Medium
CVE-2023-34003
WooCommerce Box Office <= 1.1.51 - Missing Authorization
Medium
CVE-2023-34368
Kanban Boards for WordPress <= 2.5.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-2298
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-2415
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout
Medium
CVE-2023-34372
Download SpamReferrerBlock <= 2.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2301
Contact Form Builder by vcita <= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-2302
Contact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-2299
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.