Medium
d0d6f467-6e62-45ff-bf9d-4db5b1ed1dd2
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
c3319993-6f2c-425d-8cb2-ab26f7a52139
Client Portal <= 1.1.8 - Cross-Site Request Forgery via cp_create_private_pages_for_all_users
Medium
CVE-2023-0942
Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting
Medium
b57dd8e3-e3e1-4d6b-b9dd-b5a24c4886b4
Redirect Redirection <= 1.1.3 - Missing Authorization in 'addRedirectRule' function
Medium
b2ec7d77-fe50-4bb2-a57b-6ee4246805f9
Redirect Redirection <= 1.1.3 - Missing Authorization in 'loadSettings' function
Medium
a7ec331c-51ea-466a-ab7b-4234df47114a
Redirect Redirection <= 1.1.3 - Missing Authorization in 'liveSearch' function
Medium
a7beb9b3-3e4e-4aa2-b174-ecd9307cb3d0
Redirect Redirection <= 1.1.3 - Missing Authorization in 'loadRedirectSettings' function
High
9c8b0de4-e3ee-4711-8f27-097dee843dd8
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.13.44 - Missing Authorization in Settings Import to Stored Cross-Site Scripting
Medium
CVE-2023-0364
real.Kit <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-46816
Booking Ultra Pro <= 1.1.6 - Cross-Site Request Forgery
Medium
8b421330-dd3c-4af0-9f42-95430117eb9b
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'saveRedirectSettings' function
Medium
84d43356-274e-42d5-ac40-10a34effce8d
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'addRedirectRule' function
Medium
CVE-2023-25056
Feed Them Social <= 3.0.2 - Cross-Site Request Forgery
Medium
71caa071-d279-4807-88ad-a71673b9d17d
Redirect Redirection <= 1.1.3 - Missing Authorization in 'instantEditRedirect' function
Medium
CVE-2023-25963
JS Job Manager <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title
Medium
5d1d012a-46cd-4c86-ac6f-993736a91acb
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'statusBulkEdit' function
Medium
CVE-2022-46813
Advanced Database Cleaner <= 3.1.1 - Cross-Site Request Forgery via aDBc_save_settings_callback
Medium
CVE-2023-0365
React Webcam <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
53667fd6-0d12-400d-b3a1-7cee305a2bc2
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'bulkDelete' function
Medium
CVE-2023-25971
Educare – Students & Result Management System <= 1.4.3 - Cross-Site Request Forgery
Medium
4c953a46-d2ae-41f7-a940-d23b011d9eca
Redirect Redirection <= 1.1.3 - Missing Authorization in 'SaveSettings' function
Medium
CVE-2022-3894
WP OAuth Server <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Post Deletion (wo_ajax_remove_client)
Medium
CVE-2023-26017
Jobs for WordPress <= 2.5.10.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0145
Saan World Clock <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.