Medium
CVE-2023-34004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-2414
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Missing Authorization to Settings Update and Arbitrary File Upload
Medium
CVE-2023-3055
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save
Medium
CVE-2023-34015
Advanced Flat rate shipping Woocommerce <= 1.6.4.4 - Cross-Site Request Forgery via enableDisable and deletePost
Medium
CVE-2023-3051
Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2303
Contact Form and Calls To Action by vcita <= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-2407
Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-34009
Social Media & Share Icons <= 2.8.1 - Missing Authorization via handle_installation
Medium
CVE-2023-2406
Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0873
Kanban Boards for WordPress <= 2.5.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-33995
Photo Gallery <= 1.8.15 - Missing Authorization
Medium
CVE-2023-2300
Contact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0583
VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update
Medium
CVE-2023-2405
CRM and Lead Management by vcita <= 2.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-28933
Call Now Accessibility Button <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-31087
JS Job Manager <= 2.0.0 - Cross-Site Request Forgery via multiple functions
Medium
CVE-2023-54394
PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket'
Medium
CVE-2023-33544
hawtio vulnerable to Path Traversal
Medium
CVE-2023-33546
janino vulnerable to denial of service due to stack overflow
Medium
CVE-2023-29159
Starlette has Path Traversal vulnerability in StaticFiles
Medium
CVE-2023-1430
FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control
High
CVE-2023-2201
Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id
Medium
CVE-2023-1159
Bookly <= 21.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1889
Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.