Medium
CVE-2023-0500
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-25475
Smart YouTube PRO <= 4.3 - Cross-Site Request Forgery via handle_colorbox_options
Medium
CVE-2023-26524
Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration
Medium
CVE-2023-26523
Calculated Fields Form <= 1.1.120 - Cross-Site Request Forgery
Medium
CVE-2023-0498
WP Education <= 1.2.6 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0335
WP Shamsi <= 4.3.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion
Medium
CVE-2023-0496
HT Event <= 1.4.5 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-0495
HT Slider For Elementor <= 1.3.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-25029
WP Social Bookmarking Light <= 2.0.7 - Cross-Site Request Forgery
Medium
CVE-2023-26518
WP TFeed <= 1.6.9 - Cross-Site Request Forgery via aptf_delete_cache
Medium
CVE-2023-0505
Ever Compare <= 1.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-1088
WP Plugin Manager <= 1.1.7 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0504
HT Politic <= 2.3.7 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-0497
HT Portfolio <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-1087
WC Sales Notification <= 1.2.2 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26534
WP Repost <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scritping
High
CVE-2023-26516
Debug Assistant <= 1.4 - Cross-Site Request Forgery via imlt_create_admin
Medium
CVE-2023-26520
Advanced Text Widget <= 2.1.2 - Missing Authorization via atw_dismiss_admin_notice
Medium
CVE-2023-0501
WP Insurance – WordPress Insurance Service Plugin <= 2.1.3 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-0503
Free WooCommerce Theme 99fy Extension <= 1.2.7 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-1086
Preview Link Generator <= 1.0.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26521
Search in Place <= 1.0.104 - Cross-Site Request Forgery to Feedback Submission
Medium
CVE-2023-26539
Advanced Text Widget <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
157b3095-b662-465e-a975-5b71b5d4ba2a
Real Estate 7 <= 3.3.4 - Reflected Cross-Site Scripting via ct_additional_features
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.