Medium
CVE-2023-2119
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-2031
Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2015-10102
Freshdesk (official) <= 1.7 - Open Redirect
Medium
CVE-2023-0267
Ultimate Carousel For WPBakery Page Builder <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-29096
Contact Form to DB by BestWebSoft <= 1.7.0 - Authenticated (Contributor+) SQL Injection via cntctfrmtdb_department
Medium
CVE-2023-0542
Custom Post Type List Shortcode <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-0768
Avirato hotels online booking engine <= 5.0.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-0280
Ultimate Carousel For Elementor <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-1905
WP Popups – WordPress Popup builder <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-30473
Yml for Yandex Market <= 3.10.7 - Reflected Cross-Site Scripting
Critical
CVE-2022-4118
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
Medium
CVE-2023-0268
Mega Addons For WPBakery Page Builder <= 4.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-2114
NEX-Forms <= 8.3.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-0603
Sloth Logo Customizer <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2023-1408
Video List Manager <= 1.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-30747
WooCommerce Easy Duplicate Product <= 0.3.0.0 - Reflected Cross-Site Scripting via wedp_duplicated
Medium
CVE-2023-0536
Wp-D3 <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0537
Product Slider For WooCommerce Lite <= 1.1.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Keys
Medium
CVE-2023-0544
WP Login Box <= 2.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1596
tagDiv Composer < 4.0 - Reflected Cross-Site Scripting via ‘td_video_url’
Medium
CVE-2023-0522
Enable/Disable Auto Login when Register <= 1.1.0 Cross-Site Request Forgery
Medium
CVE-2023-30778
PowerPress <= 10.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-30487
LearnPress - Export/Import Courses <= 4.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-0514
Membership Database <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.