Low
CVE-2021-4326
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-27456
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation
Medium
CVE-2023-0395
menu shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-27461
When Last Login <= 1.2.1 - Cross-Site Request Forgery via wll_hide_subscription_notice
High
CVE-2023-0441
Gallery Blocks with Lightbox <= 3.0.7 - Missing Authorization in pgc_sgb_action_wizard
Medium
CVE-2023-27460
CP Contact Form with Paypal <= 1.3.34 - Authenticated Feedback Submission
Medium
CVE-2023-32500
Woodmart <= 7.1.1 - Cross-Site Request Forgery to License Update
Medium
007af51b-95b5-4b12-9f74-abf31f6de341
Real Estate 7 <= 3.3.4 - Cross-Site Request Forgery
Critical
CVE-2023-23315
Improper neutralization of an SQL parameter in stripejs module for PrestaShop
High
CVE-2023-25575
api-platform/core's secured properties may be accessible within collections
High
CVE-2023-26105
mde utilities contains Prototype Pollution
Medium
CVE-2023-1081
Microweber Cross-site Scripting vulnerability
Medium
CVE-2023-0272
NEX-Forms - Ultimate Form Builder <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1092
OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1 - Cross-Site Request Forgery via 'delete' in mooauth_client_applist_page
Medium
CVE-2023-0502
WP News <= 1.1.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26527
Debug Assistant <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0484
Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26522
WP Repost <= 0.1 - Missing Authorization
Medium
CVE-2023-25470
Rus-To-Lat <= 0.3 - Cross-Site Request Forgery to Plugins Options Changes
Medium
CVE-2023-1025
Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0336
OoohBoi Steroids for Elementor <= 2.1.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion
Medium
CVE-2023-26537
WP No External Links <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scritping
Medium
CVE-2023-0499
QuickSwish <= 1.0.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26514
XML Sitemap Generator for Google <= 1.3.3 - Cross-Site Request Forgery to Plugin Settings Changes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.