Medium
CVE-2023-23890
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2023-23992
AutomatorWP <= 2.5.0 - Cross Site Request Forgery
Medium
CVE-2022-47425
ARMember <= 3.4.10 - Missing Access Control leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2023-23972
Social Like Box and Page by WpDevArt <= 0.8.39 - Authenticated (Admin+) Stored Cross Site Scripting
Critical
CVE-2022-45808
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection
Medium
CVE-2023-23878
WP MAPS <= 4.3.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-23681
Image Hover Effects For WPBakery Page Builder <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-0075
Amazon JS <= 0.10 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-23864
Very Simple Google Maps <= 2.8.4 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-22691
Category Specific RSS feed Subscription <= 2.1 - Cross-Site Request Forgery
High
CVE-2023-23979
Quick Event Manager <= 9.7.4 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2023-23996
ProfilePress <= 4.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23980
MailOptin <= 1.2.54.0 - Authenticated (Admin+) Cross Site Scripting
High
CVE-2023-23813
My Calendar <= 3.4.3 - Cross-Site Request Forgery
Low
CVE-2023-23971
WP Time Slots Booking Form <= 1.1.81 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-23686
Simple Staff List <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47589
CTT Expresso para WooCommerce <= 3.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-23986
Reviews and Rating – Google My Business <= 4.14 - Missing Authorization
Medium
CVE-2023-23975
Quick Event Manager <= 9.7.4 - Missing Authorization Checks
Medium
CVE-2023-23985
Quiz Maker <= 6.3.9.4 - Content Spoofing
Medium
CVE-2023-23895
WP Time Slots Booking Form <= 1.1.82 - Improper Authorization Checks
Medium
CVE-2023-23728
WP Flipclock <= 1.7.4 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-23978
WP Client Reports <= 1.0.16 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-23988
My Tickets <= 1.9.11 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.