Critical
CVE-2023-28706
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-34005
Front End Users <= 3.2.24 - Cross-Site Request Forgery
Medium
CVE-2023-29440
Simple Job Board <= 2.10.3 - Cross-Site Request Forgery via sjb_save_settings_section
Medium
CVE-2023-30489
Email Subscription Popup <= 1.2.16 - Reflected Cross-Site Scripting
Medium
5ccfafaf-902f-4142-90b3-9f70800eb377
Front End Users <= 3.2.24 - Missing Authorization to Unauthenticated Registered User Deletion
Medium
CVE-2023-23704
Comments Ratings <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-25487
PixTypes <= 1.4.14 - Cross-Site Request Forgery
Medium
ebea0ec0-f7ee-41c5-b0a5-a78e9cd11d41
Superb Social Media Share Buttons and Follow Buttons <= 1.1.3 - Cross-Site Request Forgery via spbsmAjax
Medium
e74be387-1413-49c5-91c6-66e620562b42
Hustle <= 7.6.4 = Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1913
Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-29438
SimpleModal Contact Form (SMCF) <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-22711
IMPress Listings <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Listing Fields
High
CVE-2023-1912
Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-29428
Superb Social Media Share Buttons and Follow Buttons <= 1.1.3 - Missing Authorization via spbsmAjax
Medium
CVE-2023-29425
ShiftController Employee Shift Scheduling <= 4.9.23 - Cross-Site Request Forgery via get
Medium
CVE-2023-1920
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'
High
CVE-2023-29424
ShiftController Employee Shift Scheduling <= 4.9.23 - Unauthenticated Stored Cross-Site Scripting via 'hc-title'
Medium
CVE-2023-1930
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'
Medium
CVE-2023-1926
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'
Medium
CVE-2023-1931
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'
Medium
CVE-2023-23701
Easy Sign Up <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1375
WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache Deletion
Medium
CVE-2023-29437
Connections Business Directory <= 10.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-26015
MapPress Maps for WordPress <= 2.85.4 - Authenticated (Contributor+) SQL Injection via get_maps
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.