Critical
CVE-2023-2138
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-2083
Essential Blocks <= 4.0.6 - Missing Authorization via save
Medium
CVE-2023-30784
Kaya QR Code Generator <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via qrCode attribute
Medium
CVE-2023-1891
Helpie FAQ <= 1.9.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-2170
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2022-43490
Stream <= 3.9.2 - Cross-Site Request Forgery
Medium
CVE-2023-28414
ApexChat <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-7295
Video Grid <= 1.21 - Reflected Cross-Site Scripting
Medium
CVE-2023-2087
Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
Medium
CVE-2023-23810
Panorama – WordPress Project Management Plugin <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0762
Clock In Portal <= 2.1 - Cross-Site Request Forgery to Designation Deletion
Medium
CVE-2023-30785
Video Grid <= 1.21 - Reflected Cross-Site Scripting
Medium
CVE-2023-1169
OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload
Medium
CVE-2023-2159
CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
Medium
CVE-2023-2085
Essential Blocks <= 4.0.6 - Missing Authorization via templates
Medium
CVE-2023-1869
YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23794
Semalt Blocker <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
a3b164e0-de2e-40d5-935e-31f5bebd87cf
WP-FormAssembly <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2086
Essential Blocks <= 4.0.6 - Missing Authorization via template_count
Medium
CVE-2023-1915
Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting
High
CVE-2022-3342
Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization
Medium
CVE-2022-33961
YellowPencil Visual CSS Style Editor <= 7.5.8 - Reflected Cross-Site Scripting liveLink
Medium
CVE-2022-41987
BadgeOS <= 3.7.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-23873
BBSpoiler <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.