High
CVE-2023-0631
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-26532
Social Auto Poster <= 2.1.4 - Cross-Site Request Forgery to Plugin Settings Reset
Medium
CVE-2022-41790
WP Time Slots Booking Form <= 1.1.76 - Missing Authorization to Feedback Submission
Medium
CVE-2023-0660
Smart Slider 3 <= 3.5.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-24249
laravel-admin has Arbitrary File Upload vulnerability
High
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
High
CVE-2023-1070
TeamPass External Control of File Name or Path vulnerability
Medium
CVE-2023-1067
Pimcore vulnerable to Cross-site Scripting
Medium
CVE-2022-34344
Wholesale Suite <= 2.1.5 - Missing Authorization to Plugin Settings Change
Medium
CVE-2023-26535
Sheets To WP Table Live Sync <= 2.12.15 - Cross-Site Request Forgery
Medium
CVE-2023-0865
WooCommerce Multiple Customer Addresses & Shipping <= 21.6 - Missing Authorization leading to Authenticated (Subscriber+) Arbitrary Address Creation/Deletion/View/Updates
Medium
CVE-2023-26515
Simple Slug Translate <= 2.7.2 - Authenticated (Administrator+) Stored Cross-Site Scritping
Medium
CVE-2022-4466
WordPress Infinite Scroll - Ajax Load More <= 5.6.0.2 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-1080
GN Publisher <= 1.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-25961
Darcie <= 1.1.5 - Reflected Cross-Site Scripting via JS split
High
CVE-2023-23700
OceanWP <= 3.4.1 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2023-26519
Publish to Schedule <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-0940
ProfileGrid <= 5.3.0 - Missing Authorization to Arbitrary Password Reset
Medium
CVE-2023-26517
Dashboard Widgets Suite <= 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0890
Shortcodes Ultimate <= 5.12.7 - Authenticated (Subscriber+) Arbitrary Post Access via Shortcode
Medium
CVE-2023-25964
We’re Open! <= 1.46 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-22693
WP Google Tag Manager <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2023-0911
Shortcodes Ultimate <= 5.12.7 - Authenticated (Subscriber+) Information Exposure
Critical
CVE-2023-26540
Houzez <= 2.7.1 - Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.