Medium
CVE-2022-46844
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-23791
HT Menu <= 1.2.1 - Cross-Site Request Forgery via plugin_activation
Medium
CVE-2023-23803
JustTables – WooCommerce Product Table <= 1.4.9 - Cross-Site Request Forgery via plugin_activation()
Medium
CVE-2023-23789
Premmerce Redirect Manager <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
af075ffe-553a-4351-a696-5c678788f3b9
Slimstat Analytics <= 4.9.3.3 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-23731
WishSuite <= 1.3.3 - Cross-Site Request Forgery via plugin_activation()
Medium
9bcc1965-c409-40ba-a942-175646ad8fda
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Authenticated(Admin+) Stored Cross-Site Scripting via Plugin Settings
Medium
CVE-2023-23786
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
8566a5ad-df8a-4843-82c9-05da9d44582d
Easy Quiz Maker <= 1.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-23787
Premmerce Redirect Manager <= 1.0.10 - Cross-Site Request Forgery via deleteRedirect()
Medium
CVE-2023-28988
Direct checkout, Add to cart redirect for Woocommerce <= 2.1.48 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23788
Custom More Link Complete <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-26533
Zippy <= 1.6.1 - Authenticated (Contributor+) Sensitive Information Disclosure
Medium
CVE-2022-46846
Trending/Popular Post Slider and Widget <= 1.5.7 - Cross-Site Request Forgery via wtpsw_post_view_count
Medium
CVE-2023-28990
Viral Mag <= 1.0.9 - Missing Authorization to Arbitrary Plugin Activation
Medium
39a3450e-f3c2-4c89-985d-28e23eb433dd
External Media <= 1.0.36 - Authenticated(Author+) File Upload to Stored Cross-Site Scripting via SVG
Medium
CVE-2023-28995
Configurable Tag Cloud <= 5.2 - Cross-Site Request Forgery via ctc_options_page()
Medium
CVE-2023-28932
WPMobile.App <= 11.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27639
[CVE-2023-27640][CWE-22] Multiple path traversal in Custom Product Designer (tshirtecommerce) module for PrestaShop
High
CVE-2023-28103
Prototype pollution in matrix-react-sdk
High
CVE-2023-28447
smarty Cross-site Scripting vulnerability in Javascript escaping
Unrated
drupal-contrib-2023-012
drupal/xray_audit - SA-CONTRIB-2023-012
Medium
CVE-2023-28158
Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)
Medium
CVE-2023-28930
Mobile Banner <= 1.5 - Cross-Site Request Forgery leading to Plugin Settings Changes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.