Medium
CVE-2023-22685
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-45371
ShopEngine <= 4.1.1 - Cross-Site Request Forgery via get_product
Medium
CVE-2023-23688
Social Share Boost <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via ssboost shortcode
High
CVE-2023-1019
Help Desk WP <= 1.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-23683
White Label Branding for Elementor Page Builder <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-1890
Tablesome <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-25468
Reservation.Studio widget <= 1.0.11 - Cross-Site Request Forgery via plugin settings
Medium
CVE-2022-46814
Kodex Posts likes <= 2.4.3 - Cross-Site Request Forgery
Medium
75824b96-8674-4340-9e56-b0cb0f52503d
Robokassa payment gateway for Woocommerce <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46817
Flyzoo Chat <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-4943
miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change
High
CVE-2022-47420
Accessibility Suite by Online ADA <= 4.12 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-46856
Woocommerce Product Designer <= 4.3.3 - Cross-Site Request Forgery
High
CVE-2022-4712
WP Cerber Security <= 9.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-22684
Subscribers – Free Web Push Notifications <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2179
WooCommerce Order Status Change Notifier <= 1.1.0 - Authenticated (Subscriber+) Arbitrary Order Status Update
Medium
CVE-2022-38356
Pearl <= 1.3.4 - Cross-Site Request Forgery via stm_save_hb_settings
High
CVE-2023-2180
Kiwiz - Certification de facturation - Woocommerce <= 2.1.3 - Unauthenticated Arbitrary File Download
Medium
CVE-2023-0520
RapidExpCart <= 1.0 - Authenticated (Level 8/Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-46818
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection
Medium
CVE-2022-46861
Login Page Styler <= 6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2015-10101
Google Analytics Top Content Widget <= 1.5.5 - Reflected Cross-Site Scripting
High
CVE-2022-47432
Shortcode IMDB <= 6.0.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-22703
WCP Contact Form <= 3.1.0 - Reflected Cross-Site Scripting via tab parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.